Views to Use in Custom Reports
Database views provide an easier and more secure way to share the reporting data without having to expose the database tables directly. Each view is essentially a database query. Some columns refer to columns in other views, and these relationships are noted.
Understanding the Differences Between Views
There are many views that are very similar to each other but provide different levels of details related to role assignments and so forth. This section briefly covers the differences between views so that you can decide which view to use, based on your needs.
When choosing which view to use, keep in mind that a view that provides less detail results in a faster query response time.
| What is Included in a View | Which Views You Can Use |
|---|---|
| A list of who can log in to which computers | EffectiveAuthorizedUsers_Computer (Including computers in classic and hierarchical zones) EffectiveAuthorizedUsers_Computer_Classic (Only computers in classic zones) EffectiveAuthorizedUsers_Computer_Hierarchical (Only computers in hierarchical zones |
| A list of who can log in to which computer and what privileges are granted to these users | EffectiveLoginUserPrivileges_Computer EffectiveAuthorizedUserPrivileges_Computer (Same as EffectiveLoginUserPrivileges_Computer, just to consist the naming as the other views) |
| A list of Active Directory users' effective role assignments | EffectiveRoleAssignment (Both hierarchical & classic zones) EffectiveRoleAssignment_Classic (Classic zones only) EffectiveRoleAssignment_Hierarchical (Hierarchical zones only) |
| A list of the Active Directory users' effective privileges at the computer level (The Active Directory users list in the view may not have the access right to the computer) | EffectiveRolePrivileges_Computer |
| A list of the Active Directory users' effective system rights at the computer level (The Active Directory users list in the view might not have the access right to the computer) | EffectiveSysRights |
| A list of the authorized users’ privileges The list indicates if a role or right supports its accessibility to the computer | EffectiveUserPrivileges_Computer |
| A list of the Active Directory users' privileges at the computer role level | EffectiveUserPrivileges_ComputerRole_Unix (Assuming all computers managed by the Computer Role are UNIX) EffectiveUserPrivileges_ComputerRole_ Windows (Assuming all computers managed by the Computer Role are Windows) |
| A list of the Active Directory users' privileges at the Zone level | EffectiveUserPrivileges_Zone_Unix (Assuming all computers managed by the Zone are UNIX) EffectiveUserPrivileges_Zone_Windows (Assuming all computers managed by the Zone are UNIX) |
| Local users | EffectiveAuthorizedLocalUsers_Computer (A local users' version to the EffectiveAuthorizedUsers_Computer) EffectiveAuthorizedLocalUserPrivileges_Computer (A Local users' version to the EffectiveLoginUserPrivileges_Computer) EffectiveLocalUsersRoleAssignment (A Local users' version to the EffectiveRoleAssignment) |
ADComputers View
The ADComputers view lists all Active Directory computers for each monitored domain.
| Column name | Description | Refers to |
|---|---|---|
| ADComputer_-Account-Enabled | 1 – Active Directory computer’s account is enabled, 0 – account is disabled | |
| ADComputer_AccountEnabled_Desc | The display value for ADComputer_Role (Yes/No) | |
| ADComputer_-Canonical-Name | Active Directory computer’s canonical name | |
| ADComputer_CnName | The Active Directory computer’s common name. | |
| ADComputer_-Description | The description to the Active Directory computer | |
| ADComputer_-Dns-Host-Name | Active Directory computer’s dnsHostName | |
| ADComputer_DomainId | The identification number of the computer’s domain. | Domains.Id |
| ADComputer_Domain-Name | The name of the domain that the Active Directory computer belongs to. | |
| ADComputer_-GUID | The object GUID of the Active Directory computer | |
| ADComputer_Location | The Active Directory computer’s location. | |
| ADComputer_ManagerGUID | The hosting Active Directory computer’s GUID for the user or group. | |
| ADComputer_ManagerObjectName | The Active Directory computer’s manager object name. | |
| ADComputer_ManagerType | The type of computer manager. 1=user, 2=group. | |
| ADComputer_ManagerType_Desc | The description of the Active Directory manager type. | |
| ADComputer_ObjectName | The object name of the computer, in the format of <computer CN>.<computer domain>. | |
| ADComputer_-OS | Active Directory computer’s operating system | |
| ADComputer_-Os-Version | Active Directory computer’s operating system version | |
| ADComputer_OU | The OU of the Active Directory computer. It will be null if the computer is not under an OU | |
| ADComputer_PwdLastChangedTime | The last changed time for Active Directory computer’s password (UTC time). This is an approximation only. | |
| ADComputer_Role | Whether the computer is running as a domain controller or not 1 - workstation role, 2 - domain controller role | |
| ADComputer_Role_Desc | The display value for ADComputer_Role (Workstation/Domain Controller) | |
| ADComputer_-Sam-Account-Name | Active Directory computer’s samAccountName | |
| ADComputer_-Time-Created | The creation time of the Active Directory computer (UTC time) | |
| ADComputer_TrustedDelegate | Allows services to act on behalf of another user. |
Adcomputers Columns Used in Other Views
| Column name | Referred from other view |
|---|---|
| ADComputer_-GUID | ADGroupComputerMembers.ADComputer_GUID ComputerRoleMembership.ADComputer_GUID ZoneComputers.ZoneComputer_ADComputerId |
ADComputers_Stale View
The ADComputers_Stale view lists all stale Active Directory computers for each domain. Computers are considered as stale if the passwords for them haven’t changed for 90 or more days.
| Column Name | Description | Refers to |
|---|---|---|
| ADComputer_AccountEnabled | 1 – Active Directory computer’s account is enabled, 0 – account is disabled | |
| ADComputer_AccountEnabled_Desc | The display value for ADComputer_Role (Yes/No) | |
| ADComputer_-Canonical-Name | Active Directory computer’s canonical name | |
| ADComputer_CnName | The Active Directory computer’s common name. | |
| ADComputer_-Description | The description about the Active Directory computer | |
| ADComputer_DnsHostName | Active Directory computer’s dnsHostName | |
| ADComputer_DomainId | The ID of the computer’s domain | Domains.Id |
| ADComputer_DomainName | The name of the domain which the Active Directory computer belongs to | |
| ADComputer_GUID | The object GUID of the Active Directory computer | |
| ADComputer_ObjectName | The object name of the computer, in the format of <computer CN>.<computer domain>. | |
| ADComputer_OS | Operating system of Active Directory computer | |
| ADComputer_OsVersion | The operating system version number of the Active Directory computer. | |
| ADComputer_OU | The OU of the Active Directory computer. It will be null if the computer is not under an OU | |
| ADComputer_PwdLastChangedTime | The last changed time for Active Directory computer’s password (UTC time). This is an approximation only. | |
| ADComputer_-Role | Whether the computer is running as a domain controller or not 1 - workstation role, 2 - domain controller role | |
| ADComputer_Role_Desc | The display value for ADComputer_Role (Workstation/Domain Controller) | |
| ADComputer_SamAccountName | Active Directory computer’s samAccountName | |
| ADComputer_-Time-Created | The creation time of the Active Directory computer (UTC time) |
ADGroupComputerMembers View
The ADGroupComputerMembers lists all computers that are members for each Active Directory group. Nested members are included.
| Column Name | Description | Refers to |
|---|---|---|
| ADComputer_CanonicalName | The canonical name of the Active Directory computer | |
| ADComputer_CnName | The Active Directory computer’s common name. | |
| ADComputer_DnsHostName | The DNS host name of the Active Directory computer | |
| ADComputer_GUID | The GUID of the Active Directory computer | ADComputers.ADComputer_GUID |
| ADComputer_ObjectName | The object name of the computer, in the format of <computer CN>.<computer domain>. | |
| ADComputer_Os | The operating system name of the Active Directory computer | |
| ADComputer_OsVersion | The OS version of the Active Directory computer | |
| ADComputer_SamAccountName | The samAccountName of the Active Directory computer | |
| ADGroup_CanonicalName | The canonical name of the Active Directory group | |
| ADGroup_GUID | The GUID of the Active Directory group | ADGroups.GUID |
| ADGroup_Name | The name of the Active Directory group | |
| ADGroup_ObjectName | The display name for the Active Directory group, formatted as <group samAccountName>@<domain name>. |
ADGroups View
The ADGroups view lists all Active Directory groups for each domain.
| Column Name | Description | Refers to |
|---|---|---|
| ADGroup_ManagerGUID | The hosting Active Directory computer’s GUID for the user or group. | |
| ADGroup_ManagerObjectName | The object name for the user or group who manages this group. | |
| ADGroup_ManagerType | The type of object that is the manager for this group. 1=user, 2=group. | |
| ADGroup_ManagerType_Desc | The description of the Active Directory manager type. | |
| CanonicalName | Active Directory group’s canonical name | |
| Description | Active Directory group’s description | |
| DomainId | The identification for the domain which the Active Directory group belongs to | Domains.Id |
| Active Directory group’s email | ||
| GroupName | Active Directory group’s name | |
| GUID | The object GUID of the Active Directory group. | |
| IsBuiltIn | 1 – is built in group, 0 – is not built in group | |
| NTLogonName | The NT logon name (samAccountName) of the Active Directory group | |
| ObjectName | The display name for the Active Directory group, formatted as <group samAccountName>@<domain name>. | |
| OU | The OU of the Active Directory group. It is null if the group is not under an OU | |
| TimeCreated | The creation time of the Active Directory group (UTC time) | |
| Type | The scope of the Active Directory group 1 - domain local, 2 - global, 3 - universal |
ADGroups columns used in other views
| Column name | Referred from other view |
|---|---|
| ADGroups.GUID | ADGroupComputerMembers.ADGroup_GUID ADGroupUserMembers.ADGroup_GUID EffectiveZoneGroups.ZoneGroup_ADGroup_GUID ZoneGroups.ZoneGroup_ADGroup_GUID EffectiveUserPrivileges_Computer.Trustee_Id EffectiveUserPrivileges_ComputerRole.Trustee_Id EffectiveUserPrivileges_Zone.Trustee_Id |
ADGroupSubGroups View
Lists the Active Directory group and the nested groups, including children groups and grand-children groups.
| Column Name | Description | Refers to |
|---|---|---|
| ParentGroup_CanonicalName | The canonical name of the parent group | |
| ParentGroup_DomainId | The domainID of the parent group | Domains.Id |
| ParentGroup_DomainName | The domain name of the parent group | |
| ParentGroup_GroupType | The group type of the parent group 1-Domain local, 2-Global, 3-Universal | |
| ParentGroup_GroupTypeDesc | The display value for ParentGroup_GroupType (Domain local/Global/Universal) | |
| ParentGroup_NTLogonName | The NTLogonName of the parent group | |
| ParentGroup_ObjectName | The object name of the parent group. The general display value for the AD group in precanned report. Format:<AD group samAccountName>@<domain Name> | |
| ParentGroup_ParentGroupGUID | The object GUID of the parent group | ADGroups.GUID |
| ParentGroup_ParentGroupName | The name of the parent group | |
| SubGroup_CanonicalName | The canonical name of the sub group | |
| SubGroup_DomainId | The domainIDof the sub group | Domains.Id |
| SubGroup_DomainName | The domain name of the sub group | |
| SubGroup_EffectiveSubGroupGUID | The object GUID of the sub group | ADGroups.GUID |
| SubGroup_GroupName | The group name of the sub group | |
| SubGroup_GroupType | The group type of the sub group 1-Domain local, 2-Global, 3-Universal | |
| SubGroup_GroupTypeDesc | The display value for SubGroup_GroupType (Domain local/Global/Universal) | |
| SubGroup_NTLogonName | The NTLogon name of the sub group Note: There is also a column with a similar name, SubGroup_NTLogoName, that will be deprecated in a future release. | |
| SubGroup_ObjectName | The object name of the sub group. The general display value for the AD group in precanned report. Format:<AD group samAccountName>@<domain Name> |
ADGroupUserMembers View
The ADGroupUserMembers view lists all user members for each Active Directory group. Nested members are included.
| Column Name | Description | Refers to |
|---|---|---|
| ADGroup_CanonicalName | The canonical name of the Active Directory group | |
| ADGroup_GUID | The GUID of the Active Directory group | ADGroups.GUID |
| ADGroup_Name | The name of the Active Directory group | |
| ADGroup_ObjectName | The display name for the Active Directory group, formatted as <group samAccountName>@<domain name>. | |
| ADUser_GUID | The GUID of the Active Directory user | ADUsers.ADUser_GUID |
| ADUser_Name | The name of the Active Directory user | |
| ADUser_ObjectName | The object name for the Active Directory user. | |
| ADUser_SamAccountName | The samAccountName of the Active Directory user | |
| ADUser_UPN | The upn name of the Active Directory user |
ADUsers View
The ADUsers view lists all Active Directory users for each monitored domain.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_AccountExpiryDate | The expiration date for the Active Directory user account. | |
| ADUser_AccountLockedUntil | The date and time until which time that the user’s account is locked. | |
| ADUser_AccountLockedUntil_Desc | The description text string for the ADUser_AccountLockedUntil field. | |
| ADUser_CannotBeDelegated | Cannot be delegated. | |
| ADUser_CanonicalName | The canonical name of the Active Directory user | |
| ADUser_City | The city of the Active Directory user | |
| ADUser_Company | The company of the Active Directory user | |
| ADUser_Country | The country of the Active Directory user | |
| ADUser_CreationTime | The creation time of the Active Directory user | |
| ADUser_Department | The department of the Active Directory user | |
| ADUser_Description | The description of the Active Directory user | |
| ADUser_DialInCallbackNumber | The dialin callback number of the Active Directory user | |
| ADUser_DialInCallbackOptions | The dialin callback options of the Active Directory user | |
| ADUser_DialInCallerId | The dialin callerIDof the Active Directory user | |
| ADUser_DialInStaticIp | The dialin static IP address of the Active Directory user | |
| ADUser_DialInStaticRoutes | The dialin static routes of the Active Directory user | |
| ADUser_DisplayName | The display name of the Active Directory user | |
| ADUser_DomainId | TheIDof the Domain | Domains.Id |
| ADUser_DomainName | The name of the Domain | |
| ADUser_Email | The email of the Active Directory user | |
| ADUser_Enabled | If the Active Directory user account is enabled 1 – Enabled, 0 - Disabled | |
| ADUser_Enabled_Desc | The description string for the aduser_enabled (Yes / No) | |
| ADUser_FaxNumbers | The fax numbers of the Active Directory user | |
| ADUser_FirstName | The first name of the Active Directory user | |
| ADUser_GUID | The GUID of the Active Directory user | |
| ADUser_HomePhoneNumbers | The home phone numbers of the Active Directory user | |
| ADUser_Initials | The initials of the Active Directory user | |
| ADUser_IpPhoneNumbers | The ip phone numbers of the Active Directory user | |
| ADUser_IsNeverExpire | Specifies if the user account is set to never expire. | |
| ADUser_IsNeverExpire_Desc | The description text string for the ADUser_IsNeverExpire column. | |
| ADUser_JobTitle | The job title of the Active Directory user | |
| ADUser_LastLogonTime | The last logon time of the Active Directory user | |
| ADUser_LastName | The last name of the Active Directory user | |
| ADUser_LogonScriptPath | The logon script path of the Active Directory user | |
| ADUser_ManagerGUID | The hosting Active Directory user's GUID of the user or group | |
| ADUser_ManagerObjectName | The Active Directory user's manager object name | |
| ADUser_ManagerType | The Active Directory user's manager type 1 - User, 2-Group | |
| ADUser_ManagerType_Desc | The Active Directory user's manager type description (User/Group) | |
| ADUser_MobilePhoneNumbers | The mobile phone numbers of the Active Directory user | |
| ADUser_Name | The name of the Active Directory user | |
| ADUser_ObjectName | The display name for the Active Directory user, formatted as <user samAccountName>@<domain name>. | |
| ADUser_Office | The office of the Active Directory user | |
| ADUser_PagerPhoneNumbers | The pager phone numbers of the Active Directory user | |
| ADUSer_PasswordNeverExpire | Password set to never expire. | |
| ADUser_PhoneNumbers | The phone numbers of the Active Directory user | |
| ADUser_PoBox | The post office box address of the Active Directory user. | |
| ADUser_PostalCode | The postal code (zip code) of the Active Directory user. | |
| ADUser_PreauthenticationNotRequired | Pre-authentication not required. | |
| ADUser_PrimaryGroupId | The primary group ID of the Active Directory group. | |
| ADUser_ProfileHomeFolder | The profile home folder of the Active Directory user | |
| ADUser_ProfilePath | The profile path of the Active Directory user | |
| ADUser_PwdLastSetTime | The password last set time of the Active Directory user. This is an approximation only. | |
| ADUser_PwdStoreUsingReversibleEncryption | Password stored using reversible encryption. | |
| ADUser_RemoteAccessPermissions | The remote access permissions of the Active Directory user | |
| ADUser_SamAccountName | The samAccountName of the Active Directory user | |
| ADUser_SmartCardNeededForLogon | Smart card needed for login. | |
| ADUser_State | The state of the Active Directory user | |
| ADUSer_Street | The Active Directory user’s street address. | |
| ADUser_TrustedForDelegation | Trusted for delegation. | |
| ADUser_Upn | The upn name of the Active Directory user | |
| ADUser_UseDesEncryption | Uses DES Encryption. | |
| ADUser_WebPages | The web pages of the Active Directory user |
ADUser Columns Used in Other Views
| Column name | Referred from other view |
|---|---|
| ADUsers.ADUser_GUID | ADGroupUserMembers.ADUser_GUID EffectiveUserPrivileges_Computer.ADUser_GUID EffectiveUserPrivileges_ComputerRole.ADUser_GUID EffectiveUserPrivileges_Zone.ADUser_GUID EffectiveZoneUsers.ZoneUser_ADUserGUID ZoneUsers.ZoneUser_ADUserGUID EffectiveUserPrivileges_Computer.Trustee_Id EffectiveUserPrivileges_ComputerRole.Trustee_Id EffectiveUserPrivileges_Zone.Trustee_Id |
ApplicationRight View
The ApplicationRight view lists the detailed attributes for each application right.
| Column Name | Description | Refers to |
|---|---|---|
| Right_Description | The description of the application right | |
| Right_FullName | The full name of the right <right name>/<zone name> | |
| Right_GUID | The GUID of the Right | Rights.Right_GUID |
| Right_Name | The name of the application right | |
| Right_Priority | The priority of the application right | |
| Right_RequireAuthentication | If this right requires authentication 1 – Yes, 0 – No | |
| Right_RequireAuthentication_Desc | If this right requires authentication (Yes/No) | |
| Right_RunasUser | Run as the specified AD user | |
| Right_ZoneId | The Id of the Zone that the Right belongs to | Zones.Zone_Id |
| Right_ZoneName | The name of the Zone that the Right belongs to |
AutoZoneComputers View
The AutoZoneComputers view lists the computers that are joined to the AutoZone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneComputer_ADComputerCnName | AD computer’s cn name | |
| ZoneComputer_ADComputerId | The GUID of the AD computer | ADComputers_ADComputer_GUID |
| ZoneComputer_ADComputerName | AD computer’s name | |
| ZoneComputer_ADComputerObjectName | Format: <AD computer CN>.<AD computer domain> Mainly used by precanned-report | |
| ZoneComputer_AgentVersion | The agent version of the Auto Zone Computer | |
| ZoneComputer_ComputerType | The IDof the computer type of the Auto Zone Computer. This value is always 2 | |
| ZoneComputer_ComputerType_Desc | The computer type of the Auto Zone Computer. This value is always ‘Unix’ | |
| ZoneComputer_Id | The ID of the Auto Zone Computer | |
| ZoneComputer_IsOrphan | To identifier if this is an orphan Auto Zone Computer 1 – Yes, 0 – No | |
| ZoneComputer_IsOrphan_Desc | (Yes/No) | |
| ZoneComputer_Name | The name of the Auto Zone Computer | |
| ZoneComputer_ZoneId | The ID of the zone. Always be -1 | |
| ZoneComputer_ZoneName | The name of the zone. The value is always ‘Auto Zone’ |
CommandRight View
This view lists the detailed attributes for each command right.
| Column Name | Description | Refers to |
|---|---|---|
| Right_AddVar | Comma separated list of environment variable name-value pairs to add | |
| Right_AllowNested | Nested command execution is allowed or not 1 – Yes, 0 – No | |
| Right_AllowNested_Desc | The description to the Right_AllowNested (Yes/No) | |
| Right_Authentication | Type of authentication required to run the command | |
| Right_DeleteVar | Comma separated list of environment variables to delete in addition to the default set | |
| Right_Description | The description of the command right | |
| Right_DzdoRunAsGroup | Comma separated list of groups allowed to run this command using dzdo | |
| Right_DzdoRunAsUser | Comma separated list of users, uids, groups or gids allowed to run this command using dzdo | |
| Right_DzshRunas | The user this command will run as under dzsh | |
| Right_FullName | The full name of the command rights. Format <command right name>/<zone name> | |
| Right_GUID | The GUID of the command right | Rights.Right_GUID |
| Right_KeepVar | Comma separated list of environment variables to keep in addition to the default set | |
| Right_MatchPath | The match path of the command right | |
| Right_Name | The name of the command right | |
| Right_Pattern | The pattern of the command right | |
| Right_PatternType | The type of the command right pattern 0 – Global, 1 – Regular expression | |
| Right_PatternType_Desc | The description of the type of the command right pattern (Global / Regular expression) | |
| Right_PreserveGroup | Preserve group membership or not | |
| Right_Priority | The priority of the command right | |
| Right_UMask | The umask value used to define who can execute the command | |
| Right_ZoneId | The ID of the zone that the command right is defined | Zones.Zone_Id |
| Right_ZoneName | The name of the zone that the command right is defined |
ComputerRoleCustomAttribute View
This view lists the computer role custom attributes.
| Column Name | Description | Refers to |
|---|---|---|
| RoleAssignment_GUID | The computer role’s object GUID. | ComputerRoles.ComputerRole_GUID |
| CustomAttribute_Name | The custom attribute’s name. | |
| CustomAttribute_Value | The custom attribute’s value. |
ComputerRoleEffectiveMembers View
This view lists the effective members of a computer role.
| Column Name | Description | Refers to |
|---|---|---|
| ComputerRole_GUID | The GUID of the Computer Role | |
| ComputerRole_ZoneId | The zone ID where the Computer Role is defined | Zones.Zone_Id |
| ComputerRole_ComputerRoleName | The name of the Computer Role | |
| ADComputer_GUID | The object GUID of the Active Directory computer | ADComputes.ADComputer_GUID |
| ADComputer_DomainId | The ID of the computer’s domain | Domains.Id |
| ADComputer_ObjectName | Format: <AD computer CN>.<AD computer domain> This field is mainly used by the default reports. | |
| ADComputer_CnName | The Active Directory computer’s cnName | |
| ADComputer_DnsHostName | The DNS host name of the Active Directory computer | |
| ZoneComputer_Id | The ID of the computer | |
| ZoneComputer_ZoneId | The ID of the zone that the computer is managed by | Zones.Zone_Id |
| ZoneComputer_Name | The name of the computer | |
| ZoneComputer_AgentVersion | The agent version of the computer | |
| ZoneComputer_Platform | The platform of the computer 1 – Windows, 2 – UNIX | |
| ZoneComputer_Platform_Desc | The description string of the ZoneComputer_Platform (Windows/UNIX) | |
| ZoneComputer_IsOrphan | If the computer is orphan 1 – Yes, 0 – No | |
| ZoneComputer_JoinDate | The date when the computer joined zone (UTC time) |
ComputerRoleMembership View
The ComputerRoleMembership view lists all computer members for each Computer Role. The view includes computers that have been added into the zone.
| Column Name | Description | Refers to |
|---|---|---|
| ADComputer_CnName | The Active Directory computer’s common name. | |
| ADComputer_DnsHostName | The dns host name of the Active Directory Computer | |
| ADComputer_DomainId | The domain ID of the Active Directory computer | Domains.Id |
| ADComputer_GUID | The GUID of the Active Directory computer | ADComputes.ADComputer_GUID |
| ADComputer_ObjectName | The object name of the computer, in the format of <computer CN>.<computer domain>. | |
| ComputerRole_ComputerRoleName | The name of the Computer Role | |
| ComputerRole_GUID | The object GUID of the computer role | |
| ComputerRole_ZoneId | The ID of the zone where this computer role is defined | Zones.Zone_Id |
| ZoneComputer_AgentVersion | The agent version of the computer | |
| ZoneComputer_Id | The ID of the computer | |
| ZoneComputer_IsOrphan | If the computer is orphaned 1 – Yes, 0 – No | |
| ZoneComputer_JoinDate | The date when the computer joined zone (UTC time) | |
| ZoneComputer_Name | The name of the computer | |
| ZoneComputer_Platform | The computer platform 1 – Windows, 2 – Unix | |
| ZoneComputer_PlatformDesc | The display value of ZoneComputer_Platform (Windows/Unix) | |
| ZoneComputer_ZoneId | The ID of the zone where the computer is joined to | Zones.Zone_Id |
ComputerRoles View
This view lists the computer role information.
| Column Name | Description | Refers to |
|---|---|---|
| ComputerRole_Description | The description of the Computr Role | |
| ComputerRole_GroupGUID | The GUID of the AD group which the Computer Role monitoring | ADGroups.GUID |
| ComputerRole_GroupName | The name of the AD group which the Computer Role monitoring | |
| ComputerRole_GUID | The GUID of the Computer Role | |
| ComputerRole_Name | The name of the Computer Role | |
| ComputerRole_ZoneId | The ID of the zone where the Computer Role is defined | Zones.Zone_Id |
| ComputerRole_ZoneName | The name of the zone where the Computer Role is defined |
DelegationTasks View
This view lists which user, group, computer, or well-known SID have which delegation tasks.
| Column Name | Description | Refers to |
|---|---|---|
| Target | The target in which the Server Suite task is delegated | |
| Target_DomainId | The domain ID of the target | Domains.Id |
| Target_GUID | The GUID of the target | |
| Zone_Id | The zone ID | Zones.Zone_Id |
| Scope | The scope in which the Server Suite task is delegated | |
| Scope_Id | The scope ID: 1 - Zone; 2 - UNIX Computer; 3 - WINDOWS Computer; 4 - Computer Role | |
| Trustee_Name | The trustee name | |
| Trustee_Type | The trustee type is one of the following: 1 - User; 2 - UNIX computer; 3 - Windows computer; 4 - computer role. | |
| Trustee_Type_Desc | The description of the trustee type | |
| Trustee_DomainId | The domain ID of the trustee | Domains.Id |
| Task_Id | Task Id | DelegationTaskType.Task_Id |
| Task_Name | Task name |
DelegationTaskType View
This view lists the Server Suite delegation tasks.
| Column Name | Description | Refers to |
|---|---|---|
| Task_Name | Task name | |
| Task_Id | Task Id |
Domains View
The Domains view lists all monitored domains.
| Column Name | Description |
|---|---|
| Dc | The domain controller for the monitored domain |
| DomainName | The name of the monitored domain |
| Id | The ID of the monitored domain |
Domains Columns Used in Other Views
| Column name | Referred from other view |
|---|---|
| Domains.Id | ADComputers.ADComputer_DomainID ADComputers_Stale.ADComputer_DomainId ADGroups.DomainId ADUsers.ADUser_DomainID ComputerRoleMembership.ADComputer_DomainId RoleAssignments_ComputerRole.RoleAssignment_ZoneDomainId UserAccounts.ADUser_DomainId ZoneRolePrivileges.ZoneRolePrivileges_RightZoneDomainId Zones.Zone_DomainID Zones_Classic.Zone_DomainID Zones_Hierarchical.Zone_DomainID |
EffectiveAuthorizedUserPrivilegesSummary View
This view lists effective privileges rights granted to Active Directory users for both hierarchical and classic zones.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_GUID | The object GUID of the Active Directory user that the user profile refers to. | ADUsers.ADUser_GUID |
| ZoneComputer_ID | The object GUID ID of the computer profile | ZoneComputers. ZoneComputer_Id |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
EffectiveAuthorizedUserPrivilegesSummary__Hierarchical View
This view lists effective privileges rights granted to Active Directory users for just hierarchical zones.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_GUID | The object GUID of the Active Directory user that the user profile refers to. | ADUsers.ADUser_GUID |
| ZoneComputer_ID | The object GUID ID of the computer profile | ZoneComputers. ZoneComputer_Id |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
EffectiveAuthorizedUserPrivilegesSummary_Classic View
This view lists effective privileges rights granted to Active Directory users for just classic zones.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_GUID | The object GUID of the Active Directory user that the user profile refers to. | ADUsers.ADUser_GUID |
| ZoneComputer_ID | The object GUID ID of the computer profile | ZoneComputers. ZoneComputer_Id |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
EffectiveAuthorizedLocalUserPrivileges_Computer View
This view lists the authorized local user’s effective rights and privileges for each computer.
| Column Name | Description | Refers to |
|---|---|---|
| ADComputer_CanonicalName | The canonical name of the Active Directory computer | |
| ADComputer_CnName | The cn name of the Active Directory computer | |
| ADComputer_DnsHostName | The dns host name of the Active Directory computer | |
| ADComputer_ObjectName | The object name of the Active Directory computer | |
| Assigned_Location | The display value of the source assignment location | |
| Assigned_LocationType | The source assignment location | |
| Assigned_LocationType_Desc | The type of the source assignment location 1 – Zone 2 – Computer 3 – Computer Role | |
| EffectiveZone_Id | The auto generated ID of the Zone | Zones.Zone_Id |
| EffectiveZone_Name | The name of the Zone | |
| LocalUser_Name | The name of the local user | |
| LocalUser_ProfileState | The profile state of the local user 1 =Enabled, 2 = Disabled, 3 = Removed from /etc/passwd | |
| LocalUser_ProfileState_Desc | The display value for LocalUser _ProfileState (Enabled/Disabled/Removed from /etc/passwd) | |
| Right_FullName | The full name of the right. Format in <Right name> / <Right’s zone name> | |
| Right_Grants_Logon | If this right could support a user to logon to a system 1 – Yes, 0 – No | |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
| Right_Name | The name of the right | |
| Right_Platform | The ID of the right platform | |
| Right_Platform_Desc | The display value of the right platform | |
| Right_Type | The type ID of the right | RightType.RightTypeId |
| Right_Type_Desc | The type description of the right | |
| Role_FullName | The full name of the role. Format in <Role name> / <Role’s zone name> | |
| Role_GUID | The GUID of the role | Roles.Role_Id |
| Role_Name | The name of the role | |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| Trustee_Name | The trustee name of the role assignment | |
| Trustee_Type | The trustee type ID of the role assignment | TrusteeTypes.TrusteeType_Id |
| Trustee_Type_Desc | The type description of the trustee | |
| ZoneComputer_Id | The object GUID ID of the computer profile | ZoneComputers. ZoneComputer_Id |
EffectiveAuthorizedLocalUsers_Computer View
This view lists the effective, authorized local users for each computer.
| Column Name | Description | Refers to |
|---|---|---|
| LocalUser_Name | The name of the local user | ZoneLocalUsers.ZoneLocalUser_Name |
| ZoneComputer_Id | The ID of the zone computer | ZoneComputers.ZoneComputer_Id |
| LocalUserProfileState | The state of the local user profile, indicated by a number: Enabled Disabled Removed from /etc/passwd | |
| LocalUser_ProfileState_Desc | The text description of LocalUserProfileState |
EffectiveAuthorizedUserPrivileges_Computer View
This view lists the users who are authorized to log in and the computers that they can log in to. This EffectiveAuthorizedUserPrivileges_Computer view is the same as EffectiveLoginUserPrivilege_Computer View .
EffectiveAuthorizedUsers_Computer View
This view lists the users who can log in and the computers that they can log in to.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_GUID | The object GUID of the Active Directory user that the user profile refers to. | ADUsers.ADUser_GUID |
| ZoneComputer_Id | The computer profile’s object GUID. | ZoneComputer.ZoneComputer_ID |
EffectiveAuthorizedUsers_Computer_Classic View
This view lists the users who can log in and the classic zone computers that they can log in to.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_GUID | The object GUID of the Active Directory user that the user profile refers to. | ADUsers.ADUser_GUID |
| ZoneComputer_Id | The computer profile’s object GUID. | ZoneComputer.ZoneComputer_ID |
EffectiveAuthorizedUsers_Computer_Hierarchical View
This view lists the users who can log in the hierarchical zone computers that they can log in to.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_GUID | The object GUID of the Active Directory user that the user profile refers to. | ADUsers.ADUser_GUID |
| ZoneComputer_Id | The computer profile’s object GUID. | ZoneComputer.ZoneComputer_ID |
EffectiveAuthorizedZoneLocalUsers View
This view lists the effective user profiles for local users who can log in and the computers that they can log in to.
| Column Name | Description | Refers to |
|---|---|---|
| EffectiveZone_Id | The auto generated ID of the Zone | Zones.Zone_Id |
| EffectiveZone_Name | The name of the Zone | |
| EffectiveZone_DomainId | The domain ID of the Zone | |
| ZoneLocalUser_Id | The auto generated ID of the local user profile | ZoneLocalUsers. ZoneLocalUser_Id |
| ZoneLocalUser_Name | The name of the local user profile | |
| ZoneLocalUser_HomeDirectory | The home directory of the local user profile | |
| ZoneLocalUser_PrimaryGroupId | The primary group ID of the local user profile | |
| ZoneLocalUser_PrimaryGroupName | The primary group name of the local user profile | |
| ZoneLocalUser_Shell | The shell of the local user profile | |
| ZoneLocalUser_Uid | The UID of the local user profile | |
| ZoneLocalUser_GECOS | The GECOS of the local user profile | |
| ZoneLocalUser_ProfileState | The profile state of the local user profile 1 means Enabled, 2 means Disabled, 3 means Removed from /etc/passwd | |
| ZoneLocalUser_ProfileState_Desc | The display value for ZoneLocalUser_ProfileState (Enabled/Disabled/Removed from /etc/passwd) | |
| ZoneLocalUser_AssignmentLocation_Type | The type code of the location where the zoned local user is assigned | |
| ZoneLocalUser_AssignmentLocation_Type_Desc | The display text of the type of the location where the zoned local user is assigned | |
| ZoneLocalUser_AssignmentLocation_GUID | The GUID of the location object where the zoned local user is assigned | |
| ZoneLocalUser_AssignmentLocation_Name | The name of the location object where the zoned local user is assigned | |
| ZoneComputer_Id | The object GUID of the computer profile | ZoneComputers. ZoneComputer_Id |
| ADComputer_ObjectName | The object name of the ad computer | |
| ADComputer_DnsHostName | The DNS host name of the ad computer | |
| ADComputer_CnName | The CN name of the ad computer | |
| ADComputer_Os | The operating system of the Active Directory computer | |
| ADComputer_DomainId | The domain ID of the Active Directory computer |
EffectiveAuthorizedZoneUsers View
This view lists the authorized Active Directory user’s effective user profiles for each computer.
| Column Name | Description | Refers to |
|---|---|---|
| EffectiveZone_Id | The auto-generated ID of the Zone | Zones.Zone_Id |
| EffectiveZone_Name | The name of the Zone | |
| EffectiveZone_DomainId | The domain ID of the Zone | |
| ZoneUser_Id | The auto generated ID of the user profile | ZoneUsers. ZoneUser_Id |
| ZoneUser_Name | The name of the user profile | |
| ZoneUser_HomeDirectory | The home directory of the user profile | |
| ZoneUser_PrimaryGroupId | The primary group ID of the user profile | |
| ZoneUser_PrimaryGroupName | The primary group name of the user profile | |
| ZoneUser_Shell | The shell of the user profile | |
| ZoneUser_Uid | The UID of the user profile | |
| ZoneUser_GECOS | The GECOS of the user profile | |
| ZoneUser_IsSecondaryProfile | Whether the user profile is a secondary profile or not: 1 – Yes 0 – No | |
| ZoneUser_IsSecondaryProfile_Desc | The display value for ZoneUser_IsSecondaryProfile (Yes/No) | |
| ZoneUser_AssignmentLocation_Type | The type code of the location where the zoned user is assigned | |
| ZoneUser_AssignmentLocation_Type_Desc | The display text of the type of the location where the zoned user is assigned | |
| ZoneUser_AssignmentLocation_GUID | The GUID of the location object where the zoned user is assigned | |
| ZoneUser_AssignmentLocation_Name | The name of the location object where the zoned user is assigned | |
| ADUser_DomainId | The domain ID of the Active Directory user | |
| ADUser_GUID | The GUID of the ad user | |
| ADUser_ObjectName | The object name of the Active Directory user | |
| ZoneComputer_Id | The object GUID ID of the computer profile | ZoneComputers. ZoneComputer_Id |
| ADComputer_ObjectName | The object name of the Active Directory computer | |
| ADComputer_DnsHostName | The DNS host name of the Active Directory computer | |
| ADComputer_CnName | The CN name of the Active Directory computer | |
| ADComputer_Os | The operating system of the Active Directory computer | |
| ADComputer_DomainId | The domain ID of the Active Directory computer |
EffectiveDelegationTasks View
This view lists which Active Directory user has which delegation tasks.
| Column Name | Description | Refers to |
|---|---|---|
| Target | The target in which the Server Suite task is delegated | |
| Target_DomainId | The domain ID of the target | Domains.Id |
| Target_GUID | The GUID of the target | |
| Zone_Id | The zone ID | Zones.Zone_Id |
| Scope | The scope in which the Server Suite task is delegated | |
| Scope_Id | The scope ID: 1 - Zone; 2 - UNIX Computer; 3 - WINDOWS Computer; 4 - Computer Role | |
| Trustee_Name | The trustee name | |
| Trustee_GUID | The GUID of trustee | |
| Trustee_DomainId | The domain ID of the trustee | Domains.Id |
| Task_Id | Task Id | DelegationTaskType.Task_Id |
| Task_Name | Task name |
EffectiveGroupPrivileges_Computer View
This view lists the consolidated role assignments, logon privileges, system rights privileges for each group and computer. This view only lists the role assignments that are assigned to Active Directory groups, and lists the trustee Active Directory groups and nested groups.
| Column Name | Description | Refers to |
|---|---|---|
| ADComputer_CanonicalName | The canonical name of the Active Directory Computer in where the privileges effective | |
| ADComputer_CnName | The CN name of the Active Directory Computer in where the privileges effective | |
| ADComputer_DnsHostName | The DNS host name of the Active Directory Computer in where the privileges effective | |
| ADComputer_ObjectName | The object name of the Active Directory Computer in where the privileges effective | |
| ADGroup_CanonicalName | The canonical name of the effective assigned Active Directory group | |
| ADGroup_GUID | The GUID of the effective assigned Active Directory group | ADGroups.GUID |
| ADGroup_Name | The name of the effective assigned Active Directory group | |
| ADGroup_ObjectName | The object name of the effective assigned Active Directory group. The format is <samAccountName>@<domain name> | |
| ADGroup_SamAccountName | The samAccountName of the effective assigned Active Directory group | |
| Assigned_Location | The name of the assignment location | |
| Assigned_LocationType | The type of the assignment location 1 – Zone, 2 – Computer, 3 – Computer Role | |
| Assigned_LocationTypeDesc | The description fo the type of the assignment location (Zone, Computer, Computer Role) | |
| Computer_Platform | The platform ID of the Active Directory Computer in where the privileges effective 1 – Windows, 2 – UNIX | |
| Computer_Platform_Desc | The platform description name of the Active Directory Computer in where the privileges effective (Windows/UNIX) | |
| EffectiveZone_Id | The ID of the effective zone for the privilege assignment | Zones.Zone_Id |
| EffectiveZone_Name | The name of the effective zone for the privilege assignment | |
| Right_FullName | The full name of the right | |
| Right_Grants_Logon | If this right could support a user to logon to a system 1 – Yes, 0 – No | |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
| Right_Name | The name of the right | |
| Right_Platform | The platform ID of the right 0 – Windows, 1 – UNIX, 2 – Windows/UNIX | |
| Right_Platform_Desc | The platform description of the right (Windows, UNIX, Windows/UNIX) | |
| Right_Type | The type ID of the right | RightType.RightTypeId |
| Right_Type_Desc | The type description of the right | |
| Role_FullName | The full name of the role <role name>/<zone name> | |
| Role_GUID | The GUID of the role | Roles.Role_Id |
| Role_Name | The name of the role | |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| Trustee_Id | The GUID of the Trustee | ADGroups.ADGroup_GUID |
| Trustee_Name | The name of the trustee | |
| Trustee_Type | The type ID of the trustee type | TrusteeTypes.TrusteeType_Id |
| Trustee_Type_Desc | The type description of the trustee type | |
| ZoneComputer_Id | The ID of the Zone Computer in where the privileges effective | ZoneComputer.ZoneComputer_Id |
EffectiveLocalUserPrivilegesSummary View
This view lists effective privileges rights granted to local UNIX users for both hierarchical and classic zones.
| Column Name | Description | Refers to |
|---|---|---|
| LocalUser_Name | The name of the local user | ZoneLocalUsers.ZoneLocalUser_Name |
| LocalUser_ProfileState | The state of the local user profile, indicated by number: Enabled Disabled Removed from /etc/passwd | |
| LocalUser_ProfileState_Desc | The text description of LocalUser_ProfileState. | |
| ZoneComputer_Id | The object GUID ID of the computer profile | ZoneComputers. ZoneComputer_Id |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
EffectiveLocalUsersRoleAssignment View
This view lists the effective role assignments for local users for each computer.
| Column Name | Description | Refers to |
|---|---|---|
| Assigned_Location | The name of the assigned location | |
| Assigned_LocationTypeDesc | The assigned location: zone, computer, or computer role | |
| LocalUser_Name | The name of the local user | ZoneLocalUsers.ZoneLocalUser_Name |
| LocalUser_ProfileState | The state of the local user profile, indicated by number: Enabled Disabled Removed from /etc/passwd | |
| LocalUser_ProfileState_Desc | The text description of LocalUser_ProfileState. | |
| Role_GUID | The GUID for the role. | Roles.Role_Id |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| RoleAssignment_EndTime | The end date and time for the role assignment. | |
| RoleAssignment_StartTime | The start date and time for the role assignment. | |
| Trustee_Name | The trustee name | |
| Trustee_Type | The type of trustee, indicated by number: Active Directory user Active Directory group Local UNIX user Local UNIX group Local Windows user Local Windows group All Active Directory users All local UNIX users All local Windows users local UNIX UID | |
| Trustee_Type_Desc | The text description of the Trustee_Type | |
| ZoneComputer_Id | The ID of the zone computer. | ZoneComputers.ZoneComputer_Id |
EffectiveLoginUserPrivilege_Computer View
This view lists the users who can log in and the computers that they can log in to. .
| Column Name | Description | Refers to |
|---|---|---|
| ADComputer_CanonicalName | The canonical name of the AD Computer in where the privileges effective | |
| ADComputer_CnName | The Cn name of the AD Computer in where the privileges effective | |
| ADComputer_DnsHostName | The dns host name of the AD Computer in where the privileges effective | |
| ADComputer_ObjectName | The object name of the AD Computer in where the privileges effective | |
| ADUser_CanonicalName | The canonical name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_FullName | The full name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_GUID | The GUID of the assigned Active Directory user. It will be null when trustee type = 7 | ADUsers.ADUser_GUID |
| ADUser_Name | The name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_ObjectName | The display name for the Active Directory user, formatted as <user samAccountName>@<domain name>. | |
| ADUser_SamAccountName | The samAccount name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_Upn | The upn name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| Assigned_Location | The name of the assignment location | |
| Assigned_LocationType | The type of the assignment location 1 – Zone, 2 – Computer, 3 – Computer Role | |
| Assigned_LocationTypeDesc | The description fo the type of the assignment location (Zone, Computer, Computer Role) | |
| EffectiveZone_Id | The ID of the effective zone for the privilege assignment | Zones.Zone_Id |
| EffectiveZone_Name | The name of the effective zone for the privilege assignment | |
| Right_FullName | The full name of the right | |
| Right_Grants_Logon | If this right could support a user to logon to a system 1 – Yes, 0 – No | |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
| Right_Name | The name of the right | |
| Right_Platform | The platform ID of the right 0 – Windows, 1 – UNIX, 2 – Windows/UNIX | |
| Right_Platform_Desc | The platform description of the right (Windows, UNIX, Windows/UNIX) | |
| Right_Type | The type ID of the right | RightType.RightTypeId |
| Right_Type_Desc | The type description of the right | |
| Role_FullName | The full name of the role <role name>/<zone name> | |
| Role_GUID | The GUID of the role | Roles.Role_Id |
| Role_Name | The name of the role | |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| Trustee_ID | The ID of the Trustee | Trustee_Type = 1: ADUsers.ADUser_GUID Trustee_Type = 2: ADGroups.ADGroup_GUID |
| Trustee_Name | The name of the trustee | |
| Trustee_Type | The type ID of the trustee type | TrusteeTypes.TrusteeType_Id |
| Trustee_Type_Desc | The type description of the trustee type | |
| ZoneComputer_Id | The ID of the Zone Computer in where the privileges effective | ZoneComputer.ZoneComputer_Id |
EffectiveRoleAssignment View
This view lists all effective role assignments for each user and for each computer.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_GUID | The object GUID of the AD user which the user profile referring to. | ADUsers.ADUser_GUID |
| Assigned_Location | The source assignment location | |
| Assigned_LocationType | The type of the source assignment location 1 – Zone 2 – Computer 3 – Computer Role | |
| Assigned_LocationType_Desc | The display value of the source assignment location | |
| Role_GUID | The object GUID ID of the role | Roles.Role_Id |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| RoleAssignment_EndTime | The end date and time for the role assignment. | |
| RoleAssignment_StartTime | The start date and time for the role assignment. | |
| Trustee_Id | The trustee ID of the role assignment | |
| Trustee_Name | The trustee name of the role assignment | |
| Trustee_Type | The trustee type ID of the role assignment | TrusteeTypes.TrusteType_Id |
| Trustee_Type_Desc | The type description of the trustee | |
| ZoneComputer_Id | The object GUID ID of the computer profile | ZoneComputer.ZoneComputer_Id |
EffectiveRoleAssignment_Classic View
This view lists all effective role assignments in classic zones for each user and for each computer.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_GUID | The object GUID of the AD user which the user profile referring to. | ADUsers.ADUser_GUID |
| Assigned_Location | The source assignment location | |
| Assigned_LocationType | The type of the source assignment location 1 – Zone 2 – Computer 3 – Computer Role | |
| Assigned_LocationType_Desc | The display value of the source assignment location | |
| Role_GUID | The object GUID ID of the role | Roles.Role_Id |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| RoleAssignment_EndTime | The end date and time for the role assignment. | |
| RoleAssignment_StartTime | The start date and time for the role assignment. | |
| Trustee_Id | The trustee ID of the role assignment | |
| Trustee_Name | The trustee name of the role assignment | |
| Trustee_Type | The trustee type ID of the role assignment | TrusteeTypes.TrusteType_Id |
| Trustee_Type_Desc | The type description of the trustee | |
| ZoneComputer_Id | The object GUID ID of the computer profile | ZoneComputer.ZoneComputer_Id |
EffectiveRoleAssignment_Hierarchical View
This view lists all effective role assignments in hierarchical zones for each user and for each computer.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_GUID | The object GUID of the AD user which the user profile referring to. | ADUsers.ADUser_GUID |
| Assigned_Location | The source assignment location | |
| Assigned_LocationType | The type of the source assignment location 1 – Zone 2 – Computer 3 – Computer Role | |
| Assigned_LocationType_Desc | The display value of the source assignment location | |
| Role_GUID | The object GUID ID of the role | Roles.Role_Id |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| RoleAssignment_EndTime | The end date and time for the role assignment. | |
| RoleAssignment_StartTime | The start date and time for the role assignment. | |
| Trustee_Id | The trustee ID of the role assignment | |
| Trustee_Name | The trustee name of the role assignment | |
| Trustee_Type | The trustee type ID of the role assignment | TrusteeTypes.TrusteType_Id |
| Trustee_Type_Desc | The type description of the trustee | |
| ZoneComputer_Id | The object GUID ID of the computer profile | ZoneComputer.ZoneComputer_Id |
EffectiveRolePrivileges_Computer View
This view lists the consolidated role assignments, logon privileges, system rights privileges for each computer. This view does not expand the trustee to individual Active Directory users.
| Column Name | Description | Refers to |
|---|---|---|
| ADComputer_CanonicalName | The canonical name of the AD Computer in where the privileges effective | |
| ADComputer_CnName | The Cn name of the AD Computer in where the privileges effective | |
| ADComputer_DnsHostName | The dns host name of the AD Computer in where the privileges effective | |
| ADComputer_ObjectName | The object name of the AD Computer in where the privileges effective | |
| Assigned_Location | The name of the assignment location | |
| Assigned_LocationType | The type of the assignment location 1 – Zone, 2 – Computer, 3 – Computer Role | |
| Assigned_LocationTypeDesc | The description fo the type of the assignment location (Zone, Computer, Computer Role) | |
| Computer_Platform | The platform ID of the AD Computer in where the privileges effective 1 – Windows, 2 – UNIX | |
| Computer_Platform_Desc | The platform description name of the AD Computer in where the privileges effective (Windows/UNIX) | |
| EffectiveZone_Id | The ID of the effective zone for the privilege assignment | Zones.Zone_Id |
| EffectiveZone_Name | The name of the effective zone for the privilege assignment | |
| Right_Description | The description of the right. | |
| Right_FullName | The full name of the right | |
| Right_Grants_Logon | If this right could support a user to logon to a system 1 – Yes, 0 – No | |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
| Right_Name | The name of the right | |
| Right_Platform | The platform ID of the right 0 – Windows, 1 – UNIX, 2 – Windows/UNIX | |
| Right_Platform_Desc | The platform description of the right (Windows, UNIX, Windows/UNIX) | |
| Right_Type | The type ID of the right | RightType.RightTypeId |
| Right_Type_Desc | The type description of the right | |
| Role_FullName | The full name of the role <role name>/<zone name> | |
| Role_GUID | The GUID of the role | Roles.Role_Id |
| Role_Name | The name of the role | |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| Trustee_GUID | The GUID of the Trustee | Trustee_Type = 1: ADUsers.ADUser_GUID Trustee_Type = 2: ADGroups.ADGroup_GUID |
| Trustee_Name | The name of the trustee | |
| Trustee_Type | The type ID of the trustee type | TrusteeTypes.TrusteeType_Id |
| Trustee_Type_Desc | The type description of the trustee type | |
| ZoneComputer_Id | The ID of the Zone Computer in where the privileges effective | ZoneComputer.ZoneComputer_Id |
EffectiveSysRights View
This view lists the effective system rights in hierarchical zones for each user and for each computer.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_GUID | The object GUID of the AD user which the user profile referring to. | ADUsers.ADUser_GUID |
| ZoneComputer_Id | The object GUID ID of the computer profile | ZoneComputer.ZoneComputer_Id |
| -Audit-Level | The role’s audit level (It will be null for classic zone’s role) 0 – audit not required, 1 – audit if possible, 2 – audit required | |
| AuditLevel_Desc | The display value of Role_AuditLevel (It will be null for classic zone’s role) (Audit not Required/Audit if Possible/Audit required) | |
| Always-Permit-Logon | (It will be null for classic zone’s role) 1 – always permit, 0 – not always permit | |
| AlwaysPermitLogon_Desc | The display value of -Always-Permit-Logon (It will be null for classic zone’s role) (Always permit/Not always permit) | |
| AllowPasswordLogon | Allow Password Logon 0 – No, 1 – Yes, Null – N/A | |
| AllowPasswordLogon_Desc | The display value of AllowPasswordLogon (No, Yes, N/A) | |
| AllowPsRemoteAccess | Allow PowerShell remote access 0 - No, 1- Yes, Null - N/A | |
| AllowPsRemoteAccess_Desc | The display value of AllowPsRemoteAccess (No, Yes, N/A) | |
| AllowNonPasswordLogon | Allow Non Password Logon 0 – No, 1 – Yes, Null – N/A | |
| AllowNonPasswordLogon_Desc | The display value of AllowNonPasswordLogon (No, Yes, N/A) | |
| AllowConsoleLogon | Allow Console Logon 0 – No, 1 – Yes, Null – N/A | |
| AllowConsoleLogon_Desc | The display value of AllowConsoleLogon (No, Yes, N/A) | |
| AllowRemoteLogon | Allow Remote Logon 0 – No, 1 – Yes, Null – N/A | |
| AllowRemoteLogon_Desc | The display value of AllowRemoteLogon (No, Yes, N/A) | |
| HasVisibleRight | Has Visible Right 0 – No, 1 – Yes, Null – N/A | |
| HasVisibleRight_Desc | The display value of HasVisibleRight (No, Yes, N/A) | |
| IgnoreDisabled | If this user has ‘ignore disabled’ right on this computer 0 – No, 1 – Yes, Null – N/A | |
| IgnoreDisabled_Desc | The display value of IgnoreDisabled (No, Yes, N/A) |
EffectiveUserPrivileges_Computer View
The EffectiveUserPrivileges_Computer view lists consolidated role assignments, logon privileges, and system rights’ privileges for each user and computer.
| Column Name | Description | Refers to |
|---|---|---|
| ADComputer_CanonicalName | The canonical name of the computer | |
| ADComputer_CnName | The Active Directory computer’s common name. | |
| ADComputer_DnsHostName | The DNS host name of the computer | |
| ADComputer_ObjectName | The object name of the computer, in the format of <computer CN>.<computer domain>. | |
| ADUser_CanonicalName | The canonical name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_FullName | The full name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_GUID | The GUID of the assigned Active Directory user. It will be null when trustee type = 7 | ADUsers.ADUser_GUID |
| ADUser_Name | The name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_ObjectName | The display name for the Active Directory user, formatted as <user samAccountName>@<domain name>. | |
| ADUser_SamAccountName | The samAccount name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_Upn | The upn name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| Assigned_Location | The name of the source assignment location. It might be the zone name, computer dns host name or Computer Role name, depends on the location type | |
| Assigned_LocationType | The type of the source assignment location 1 – Zone 2 – Computer 3 – Computer Role | |
| Assigned_LocationTypeDesc | The display value of the source assignment location Zone Computer Computer Role | |
| Effective_AllowConsoleLogon | If this user has ‘console logon’ right on this computer 0 – No, 1 – Yes, Null – N/A | |
| Effective_AllowLogon | If this user can logon this computer | |
| Effective_AllowNonPasswordLogon | If this user has ‘non password logon’ right on this computer 0 – No, 1 – Yes, Null – N/A | |
| Effective_AllowNonRestrictedShell | If this user has ‘non restricted Shell’ right on this computer 0 – No, 1 – Yes, Null – N/A | |
| Effective_AllowPasswordLogon | If this user has ‘password logon’ right on this computer 0 – No, 1 – Yes, Null – N/A | |
| Effective_AllowPsRemoteAccess | If this user has the 'PowerShell Remote Access' right on this computer 0 - No; 1 - Yes; Null - N/A | |
| Effective_AllowRemoteLogon | If this user has ‘remote logon’ right on this computer 0 – No, 1 – Yes, Null – N/A | |
| Effective_AuditLevel | The human readable text of the effective audit level for this user on this computer 0 – Audit not required, 1 –Audit if possible, 2 – Audit required | |
| Effective_CloudAuthorizationRequired | If this user has ‘Cloud authorization required’ right on this computer 0 – No, 1 – Yes, Null – N/A | |
| Effective_HasRescueRight | If this role grants ‘rescue’ right to this user on this computer 0 – No, 1 – Yes | |
| Effective_HasVisibleRight | Specifies if the user is visible on this computer | |
| Effective_IgnoreDisabled | If this user has ‘ignore disabled’ right on this computer 0 – No, 1 – Yes, Null – N/A | |
| EffectiveZone_Id | The ID of the effective zone for the privilege assignment | Zones.Zone_Id Zones_Hierarchical.Zone_Id |
| EffectiveZone_Name | The name of the effective zone for the privilege assignment | |
| Grants_AuditLevel | If this role grants the effective Audit level 0 – Audit not required, 1 – Audit if possible, 2 – Audit required Given the Effective AuditLevel is 0 If this roles’s AuditLevel equals to the Effective Audit Level, then this column is 1 – Yes, Otherwise, 0 -- No | |
| Grants_CloudAuthorizationRequired | If this role grants ‘Cloud authorization required’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A | |
| Grants_ConsoleLogon | If this role grants ‘console logon’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A | |
| Grants_HasVisibleRight | Specifies if the role grants the visible right to this user on this computer. | |
| Grants_IgnoreDisabled | If this role grants ‘ignore disabled’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A | |
| Grants_Logon | If this role grants logon | |
| Grants_NonPasswordLogon | If this role grants ‘non password logon’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A | |
| Grants_NonRestrictedShell | If this role grants ‘non restricted Shell’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A | |
| Grants_PasswordLogon | If this role grants ‘password logon’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A | |
| Grants_PsRemoteAcccess | If this role grants the 'PowerShell Remote Access' right to this user on this computer 0 - No; 1 - Yes; Null - N/A | |
| Grants_RemoteLogon | If this role grants ‘remote logon’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A | |
| Grants_RescueRight | If this user has ‘rescue’ right on this computer 0 – No, 1 – Yes | |
| Right_FullName | The full name of the right. Format in <Right name> / <Right’s zone name> | |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
| Right_Name | The name of the right | |
| Right_Platform | Whether the right applies to windows, unix or both. | |
| Right_Platform_Desc | The display value of the right platform | |
| Right_Type | The ID of the right type | RightType.RightTypeId |
| Right_Type_Desc | The display value of the right type (see RightTypes view) | |
| Role_FullName | The full name of the role. Format in <Role name> / <Role’s zone name> | |
| Role_GUID | The GUID of the role | Roles.Role_Id |
| Role_Name | The name of the role | |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| Trustee_Id | The GUID of the trustee | Trustee_Type = 1: ADUsers.ADUser_GUID Trustee_Type = 2: ADGroups.ADGroup_GUID |
| Trustee_Name | The name of the trustee | |
| Trustee_Type | The type of the trustee 1 – Active Directory users 2 – Active Directory groups 7 – All Active Directory users | |
| Trustee_Type_Desc | The display value of the trustee Active Directory users Active Directory groups All Active Directory users | |
| ZoneComputer_Id | The zone computer ID | ZoneComputer.ZoneComputer_Id |
EffectiveUserPrivileges_ComputerRole_UNIX View
The EffectiveUserPrivileges_ComputerRole_UNIX view lists effective computer role level role assignments for each user. This view assumes that all computers within the computer role are UNIX computers. The assigned Active Directory users must have at least one completed profile in the zone where the computer role is defined. Assignee “All Active Directory users” will be expanded to Active Directory users.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_CanonicalName | The canonical name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_FullName | The full name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_GUID | The GUID of the assigned Active Directory user. It will be null when trustee type = 7 | ADUsers.ADUser_GUID |
| ADUser_Name | The name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_ObjectName | The general display value for the Active Directory use in the default report. The format is <Active Directory samAccountName>@<domain name>. | |
| ADUser_SamAccountName | The samAccount name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_Upn | The upn name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| Assigned_Location | The name of the source assignment location. For this view, it will be always the Computer Role name | |
| Assigned_LocationType | The type of the source assignment location 3 – Computer Role | |
| Assigned_LocationTypeDesc | The display value of the source assignment location Computer Role | |
| EffectiveZone_Id | The ID of the effective zone for the privilege assignment | Zones.Zone_Id Zones_Hierarchical.Zone_Id |
| EffectiveZone_Name | The name of the effective zone for the privilege assignment | |
| Right_FullName | The full name of the right. Format in <Right name> / <Right’s zone name> | |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
| Right_Name | The name of the right | |
| Right_Platform | The ID of the right platform | |
| Right_Platform_Desc | The display value of the right platform | |
| Right_Type | The ID of the right type | RightType.RightTypeId |
| Right_Type_Desc | Whether this right is for Unix, Windows or both | |
| Role_FullName | The full name of the role. Format in <Role name> / <Role’s zone name> | |
| Role_GUID | The GUID of the role | Roles.Role_Id |
| Role_Name | The name of the role | |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| RoleAssignment_EndTime | The end date and time for the role assignment. | |
| RoleAssignment_StartTime | The start date and time for the role assignment. | |
| Trustee_Id | The GUID of the trustee | If Trustee_Type = 1: ADUsers.ADUser_GUID If Trustee_Type = 2: ADGroups.ADGroup_GUID |
| Trustee_Name | The name of the trustee | |
| Trustee_Type | The type of the trustee 1 – Active Directory users 2 – Active Directory groups 7 – All Active Directory users | TrusteeTypes.TrusteeType_Id |
| Trustee_Type_Desc | The display value of the trustee Active Directory users Active Directory groups All Active Directory users |
Assigned_LocationType and Assigned_LocationTypeDesc might be removed in subsequent release.
EffectiveUserPrivileges_ComputerRole_Windows View
The EffectiveUserPrivileges_ComputerRole_Windows view lists effective computer role level role assignments for each user. This view assumes that all computers within the computer role are Windows computers. Assignee “All Active Directory users” are NOT expanded to Active Directory users.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_CanonicalName | The canonical name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_FullName | The full name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_GUID | The GUID of the assigned Active Directory user. It will be null when trustee type = 7 | ADUsers.ADUser_GUID |
| ADUser_Name | The name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_ObjectName | The general display value for the Active Directory use in the default report. The format is <Active Directory samAccountName>@<domain name>. | |
| ADUser_SamAccountName | The samAccount name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_Upn | The upn name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| Assigned_Location | The name of the source assignment location. For this view, it will be always the Computer Role name | |
| Assigned_LocationType | The type of the source assignment location 3 – Computer Role | |
| Assigned_LocationTypeDesc | The display value of the source assignment location Computer Role | |
| EffectiveZone_Id | The ID of the effective zone for the privilege assignment | Zones.Zone_Id Zones_Hierarchical.Zone_Id |
| EffectiveZone_Name | The name of the effective zone for the privilege assignment | |
| Right_FullName | The full name of the right. Format in <Right name> / <Right’s zone name> | |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
| Right_Name | The name of the right | |
| Right_Platform | The ID of the right platform | |
| Right_Platform_Desc | The display value of the right platform | |
| Right_Type | The ID of the right type | RightType.RightTypeId |
| Right_Type_Desc | Whether this right is for Unix, Windows or both | |
| Role_FullName | The full name of the role. Format in <Role name> / <Role’s zone name> | |
| Role_GUID | The GUID of the role | Roles.Role_Id |
| Role_Name | The name of the role | |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| RoleAssignment_EndTime | The end date and time for the role assignment. | |
| RoleAssignment_StartTime | The start date and time for the role assignment. | |
| Trustee_Id | The GUID of the trustee | If Trustee_Type = 1: ADUsers.ADUser_GUID If Trustee_Type = 2: ADGroups.ADGroup_GUID |
| Trustee_Name | The name of the trustee | |
| Trustee_Type | The type of the trustee 1 – Active Directory users 2 – Active Directory groups 7 – All Active Directory users | TrusteeTypes.TrusteeType_Id |
| Trustee_Type_Desc | The display value of the trustee Active Directory users Active Directory groups All Active Directory users |
EffectiveUserPrivileges_Zone_UNIX View
The EffectiveUserPrivileges_Zone view lists effective zone level role assignments for each user. This view assumes that all computers in the zone are UNIX computers. The assigned Active Directory users must have at least one completed profile in the zone. Assignee “All Active Directory users” is expanded to Active Directory users.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_CanonicalName | The canonical name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_FullName | The full name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_GUID | The GUID of the assigned Active Directory user. It will be null when trustee type = 7 | ADUsers.ADUser_GUID |
| ADUser_Name | The name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_ObjectName | The display value for the Active Directory in the default report. The format is <Active Directory samAccountName>@<domain name>. | |
| ADUser_SamAccountName | The samAccount name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_Upn | The upn name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| Assigned_Location | The name of the the source assignment location. For this view, it will be always the same as the EffectiveZone_Name | |
| Assigned_LocationType | The type of the source assignment location 1 – Zone | |
| Assigned_LocationTypeDesc | The display value of the source assignment location Zone | |
| EffectiveZone_Id | The ID of the effective zone for the privilege assignment | Zones.Zone_Id |
| EffectiveZone_Name | The name of the effective zone for the privilege assignment | |
| Right_FullName | The full name of the right. Format in <Right name> / <Right’s zone name> | |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
| Right_Name | The name of the right | |
| Right_Platform | Whether this right is for Unix, Windows or both | |
| Right_Platform_Desc | The display value of the right platform | |
| Right_Type | The ID of the right type | RightType.RightTypeId |
| Right_Type_Desc | The display value of the right type | |
| Role_FullName | The full name of the role. Format in <Role name> / <Role’s zone name> | |
| Role_GUID | The GUID of the role | Roles.Role_Id |
| Role_Name | The name of the role | |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| RoleAssignment_EndTime | The end date and time for the role assignment. | |
| RoleAssignment_StartTime | The start date and time for the role assignment. | |
| Trustee_Id | The GUID of the trustee | if Trustee_Type = 1: ADUsers.ADUser_GUID If Trustee_Type = 2: ADGroups.ADGroup_GUID |
| Trustee_Name | The name of the trustee | |
| Trustee_Type | The type of the trustee 1 – Active Directory users 2 – Active Directory groups 7 – All Active Directory users | TrusteeTypes.TrusteeType_Id |
| Trustee_Type_Desc | The display value of the trustee: Active Directory users Active Directory groups All Active Directory users |
Assigned_LocationType and Assigned_LocationTypeDesc may be removed in a subsequent release.
EffectiveUserPrivileges_Zone_Windows View
This view lists the effective role assignments for each user, assuming that all computers within the zone are Windows computers. Assignee “All Active Directory users” is NOT expanded to Active Directory users.
| Column Name | Description | Refers to |
|---|---|---|
| ADUser_CanonicalName | The canonical name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_FullName | The full name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_GUID | The GUID of the assigned Active Directory user. It will be null when the trustee type = 7 | ADUsers.ADUser_GUID |
| ADUser_Name | The name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_ObjectName | The display value for the Active Directory in the default report. The format is <Active Directory samAccountName>@<domain name>. | |
| ADUser_SamAccountName | The samAccount name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| ADUser_Upn | The UPN name of the assigned Active Directory user. It will be null when trustee type = 7 | |
| Assigned_Location | The name of the the source assignment location. For this view, it will be always the same as the EffectiveZone_Name | |
| Assigned_LocationType | The type of the source assignment location 1 – Zone | |
| Assigned_LocationTypeDesc | The display value of the source assignment location Zone | |
| EffectiveZone_Id | The ID of the effective zone for the privilege assignment | Zones.Zone_Id |
| EffectiveZone_Name | The name of the effective zone for the privilege assignment | |
| Right_FullName | The full name of the right. Format in <Right name> / <Right’s zone name> | |
| Right_GUID | The GUID of the right | Rights.Right_GUID |
| Right_Name | The name of the right | |
| Right_Platform | Whether this right is for Unix, Windows or both | |
| Right_Platform_Desc | The display value of the right platform | |
| Right_Type | The ID of the right type | RightType.RightTypeId |
| Right_Type_Desc | The display value of the right type | |
| Role_FullName | The full name of the role. Format in <Role name> / <Role’s zone name> | |
| Role_GUID | The GUID of the role | Roles.Role_Id |
| Role_Name | The name of the role | |
| RoleAssignment_GUID | The object GUID of the role assignment | RoleAssignments.RoleAssignment_GUID |
| RoleAssignment_EndTime | The end date and time for the role assignment. | |
| RoleAssignment_StartTime | The start date and time for the role assignment. | |
| Trustee_Id | The GUID of the trustee | if Trustee_Type = 1: ADUsers.ADUser_GUID If Trustee_Type = 2: ADGroups.ADGroup_GUID |
| Trustee_Name | The name of the trustee | |
| Trustee_Type | The type of the trustee 1 – Active Directory users 2 – Active Directory groups 7 – All Active Directory users | TrusteeTypes.TrusteeType_Id |
| Trustee_Type_Desc | The display value of the trustee: Active Directory users Active Directory groups All Active Directory users |
EffectiveZoneGroups View
The EffectiveZoneGroups view lists effective group profiles for each computer and zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneGroup_ADGroupGUID | The object GUID of the Active Directory group which the group profile referring to. | ADGroups.GUID |
| ZoneGroup_AssignmentLocation_GUID | The object GUID of the assignment location | |
| ZoneGroup_AssignmentLocation_Name | The name of the assignment location | |
| ZoneGroup_AssignmentLocation_Type | The type code of the assignment location type 1 – Zone, 2 – Computer | |
| ZoneGroup_AssignmentLocation_TypeDesc | (zone/Computer) | |
| ZoneGroup_Gid | The GID of the group profile | |
| ZoneGroup_Id | The auto generated ID of the group profile | ZoneGroups.ZoneGroup_Id |
| ZoneGroup_Name | The UNIX name of the group | |
| ZoneGroup_ZoneComputerId | The ID of the computer where the group profile is effective | ZoneComputers.ZoneComputer_Id |
| ZoneGroup_ZoneId | The ID of the zone where the group profile is defined | Zones.Zone_Id |
EffectiveZoneLocalGroupMembers View
This view lists the effective local group members for each computer and zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneLocalGroup_ZoneId | The ID of the zone where the local group profile under | Zones.Zone_Id |
| ZoneLocalGroup_ZoneComputerId | The ID of the computer profile where the local group profile effective in | ZoneComputers.ZoneComputer_Id |
| ZoneLocalGroup_Name | The UNIX name of the local group | |
| ZoneLocalGroup_MemberName | The name of the local group’s member | |
| ZoneLocalGroup_AssignmentLocation_Type | The type code of the assignment location type 1 – Zone, 2 – Computer | |
| ZoneLocalGroup_AssignmentLocation_TypeDesc | (zone/Computer) | |
| ZoneLocalGroup_AssignmentLocation_GUID | The object GUID of the assignment location | |
| ZoneLocalGroup_AssignmentLocation_Name | The name of the assignment location |
EffectiveZoneLocalGroups View
This view lists the effective local group profiles for each computer and zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneLocalGroup_Id | The auto generated ID of the local group profile | ZoneLocalGroups.ZoneLocalGroup_Id |
| ZoneLocalGroup_ZoneId | The ID of the zone where the local group profile under | Zones.Zone_Id |
| ZoneLocalGroup_ZoneComputerId | The ID of the computer profile where the local group profile effective in | ZoneComputers.ZoneComputer_Id |
| ZoneLocalGroup_Name | The UNIX name of the group | |
| ZoneLocalGroup_Gid | The GID of the local group profile | |
| ZoneLocalGroup_ProfileState | The profile state of the local group profile 1 = Enabled, 3 = Removed from /etc/group | |
| ZoneLocalGroup_ProfileState_Desc | The display value for ZoneLocalGroup_ProfileState (Enabled/Removed from /etc/group) | |
| ZoneLocalGroup_IsCompleteProfile | To indicate if this profile was a complete profile 1 – Yes, 0 - No | |
| ZoneLocalGroup_IsCompleteProfile_Desc | The description to the ZoneLocalGroup_IsCompleteProfile (Yes/No) | |
| ZoneLocalGroup_AssignmentLocation_Type | The type code of the assignment location type 1 – Zone, 2 – Computer | |
| ZoneLocalGroup_AssignmentLocation_TypeDesc | (zone/Computer) | |
| ZoneLocalGroup_AssignmentLocation_GUID | The object GUID of the assignment location | |
| ZoneLocalGroup_AssignmentLocation_Name | The name of the assignment location |
EffectiveZoneLocalUsers View
This view lists the effective local user profiles for each computer and zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneLocalUser_Id | The auto generated ID of the local user profile | ZoneLocalUsers.ZoneLocalUser_Id |
| ZoneLocalUser_ZoneId | The ID of the zone where the local user profile under | Zones.Zone_Id |
| ZoneLocalUser_ComputerProfileId | The name of the zone where the local user profile under | ZoneComputers.ZoneComputer_Id |
| ZoneLocalUser_HomeDirectory | The local user profile’s home directory | |
| ZoneLocalUser_Name | The local user profile’s unix name | |
| ZoneLocalUser_PrimaryGroupId | The local user profile’s primary group id | |
| ZoneLocalUser_PrimaryGroupName | The local user profile’s primary group name | |
| ZoneLocalUser_GECOS | The local user profile’s GECOS | |
| ZoneLocalUser_Shell | The local user profile’s shell | |
| ZoneLocalUser_Uid | The local user profile’s UID | |
| ZoneLocalUser_ProfileState | The profile state of the local user 1= Enabled, 2 = Disabled, 3 = Removed from /etc/passwd | |
| ZoneLocalUser_ProfileState_Desc | The display value for ZoneLocalUser_ProfileState (Enabled/Disabled/Removed from /etc/passwd) | |
| ZoneLocalUser_IsCompleteProfile | To indicate if this profile was a complete profile 1 – Yes, 0 - No | |
| ZoneLocalUser_IsCompleteProfile_Desc | The description to the ZoneLocalUser_ IsCompleteProfile (Yes/No) | |
| ZoneLocalUser_AssignmentLocation_Type | The type code of the location where the zoned user is assigned | |
| ZoneLocalUser_AssignmentLocation_TypeDesc | The display text of the type of the location where the zoned local user is assigned | |
| ZoneLocalUser_AssignmentLocation_GUID | The GUID of the location object where the zoned local user is assigned | |
| ZoneLocalUser_AssignmentLocation_Name | The name of the location object where the zoned local user is assigned |
EffectiveZoneLocalWinGroupMembers View
This view lists the effective local Windows group members for each computer and zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneLocalGroup_ZoneId | The ID for the zone that contains the local Windows group profile | Zones.Zone_Id |
| ZoneLocalGroup_ZoneComputerId | The ID of the computer profile where the local Windows group profile is effective | ZoneComputers.ZoneComputer_Id |
| ZoneLocalGroup_Name | The name of the local Windows group | |
| ZoneLocalGroup_MemberName | The name of the local Windows group's member | |
| ZoneLocalGroup_AssignmentLocation_Type | The type code of the assignment location type 1 – Zone, 2 – Computer | |
| ZoneLocalGroup_AssignmentLocation_TypeDesc | The display value for ZoneLocalGroup_AssignmentLocation_Type (zone/Computer) | |
| ZoneLocalGroup_AssignmentLocation_GUID | The object GUID of the assignment location | |
| ZoneLocalGroup_AssignmentLocation_Name | The name of the assignment location |
EffectiveZoneLocalWinGroups Views
This view lists the effective local Windows group profiles for each computer and zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneLocalGroup_Id | The auto-generated ID of the local Windows group profile | ZoneLocalGroups.ZoneLocalGroup_Id |
| ZoneLocalGroup_ZoneId | The ID of the zone that contains the local Windows group profile | Zones.Zone_Id |
| ZoneLocalGroup_ZoneComputerId | The ID of the computer profile where the local Windows group profile is effective | ZoneComputers.ZoneComputer_Id |
| ZoneLocalGroup_Name | The name of the local Windows group | |
| ZoneLocalGroup_Description | The description of the local Windows group | |
| ZoneLocalGroup_ProfileState | The profile state of the local Windows group profile 1 = Enabled, 3 = Removed | |
| ZoneLocalGroup_ProfileState_Desc | The display value for ZoneLocalGroup_ProfileState (Enabled/Removed) | |
| ZoneLocalGroup_AssignmentLocation_Type | The type code of the assignment location type 1 – Zone, 2 – Computer | |
| ZoneLocalGroup_AssignmentLocation_TypeDesc | The display value for ZoneLocalGroup_AssignmentLocation_Type(zone/Computer) | |
| ZoneLocalGroup_AssignmentLocation_GUID | The object GUID of the assignment location | |
| ZoneLocalGroup_AssignmentLocation_Name | The name of the assignment location |
EffectiveZoneLocalWinUsers View
This view lists the effective local Windows user profiles for each computer and zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneLocalUser_Id | The auto-generated ID of the local windows user profile | ZoneLocalUsers.ZoneLocalGroup_Id |
| ZoneLocalUser_ZoneId | The ID of the zone that contains the local Windows user profile | Zones.Zone_Id |
| ZoneLocalUser_ComputerProfileId | The ID of the computer profile where the local Windows user profile is effective | ZoneComputers.ZoneComputer_Id |
| ZoneLocalUser_Name | The name of the local Windows user | |
| ZoneLocalUser_FullName | The full name of the local Windows user | |
| ZoneLocalUser_PasswordOption | The password option of the local Windows user | |
| ZoneLocalUser_Description | The description of the local Windows user | |
| ZoneLocalUser_ProfileState | The profile state of the local Windows user profile 1 = Enabled, 2 = Disabled, 3 = Removed | |
| ZoneLocalUser_ProfileState_Desc | The display value for ZoneLocalUser_ProfileState (Enabled/Disabled/Removed) | |
| ZoneLocalUser_AssignmentLocation_Type | The type code of the assignment location type 1 – Zone, 2 – Computer | |
| ZoneLocalUser_AssignmentLocation_TypeDesc | The display value for ZoneLocalUser_AssignmentLocation_Type (zone/Computer) | |
| ZoneLocalUser_AssignmentLocation_GUID | The object GUID of the assignment location | |
| ZoneLocalUser_AssignmentLocation_Name | The name of the assignment location |
EffectiveZoneUsers View
The EffectiveZoneUsers view lists effective user profiles for each computer and zone,
| Column Name | Description | Refers to |
|---|---|---|
| ZoneUser_ADUserGUID | The object GUID of the Active Directory user which the user profile referring to. | ADUsers.ADUser_GUID |
| ZoneUser_AssignmentLocation_GUID | The GUID of the location object where the zoned user is assigned | |
| ZoneUser_AssignmentLocation_Name | The name of the location object where the zoned user is assigned | |
| ZoneUser_AssignmentLocation_Type | The type code of the location where the zoned user is assigned | |
| ZoneUser_AssignmentLocation_TypeDesc | The display text of the type of the location where the zoned user is assigned | |
| ZoneUser_ComputerProfileId | The name of the zone computer where the user profile is effective | ZoneComputers.ZoneComputer_Id |
| ZoneUser_GECOS | The user profile’s GECOS | |
| ZoneUser_HomeDirectory | The user profile’s home directory | |
| ZoneUser_Id | The auto generated ID of the user profile | ZoneUsers.ZoneUser_Id |
| ZoneUser_IsCompleteProfile | To indicate if this profile was a complete profile 1 – Yes, 0 - No | |
| ZoneUser_IsCompleteProfile_Desc | The description string for ZoneUser_ IsCompleteProfile (Yes/No) | |
| ZoneUser_IsEnabled | To indicate if this profile was enabled. Only available to classic zone’s profile. For hierarchical zone profile, it will always be null 1 – Yes, 0 - No | |
| ZoneUser_IsEnabled_Desc | The description string for ZoneUser_ IsEnabled (Yes/No) | |
| ZoneUser_IsOrphan | 1 – It is an orphan user profile. 0 – It is not an orphan profile 1 – Yes, 0 - No | |
| ZoneUser_IsOrphan_Desc | The description to the ZoneUser_ IsOrphan (Yes/No) | |
| ZoneUser_IsSecondaryProfile | To indicate if this profile was a secondary profile 1 – Yes, 0 - No | |
| ZoneUser_IsSecondaryProfile_Desc | The description string for ZoneUser_IsSecondaryProfile (Yes/No) | |
| ZoneUser_Name | The user profile’s unix name | |
| ZoneUser_PrimaryGroupId | The user profile’s primary group id | |
| ZoneUser_PrimaryGroupName | The user profile’s primary group name | |
| ZoneUser_Shell | The user profile’s shell | |
| ZoneUser_Uid | The user profile’s uid | |
| ZoneUser_ZoneId | The ID of the zone where the user profile under | Zones.Zone_Id |
Rights View
The Rights view lists all rights and system rights defined for each zone.
| Column Name | Description | Refers to |
|---|---|---|
| Grants_Logon | Specifies whether the right allows a user to log on to a computer. | |
| Right_-Description | The description of the right | |
| Right_-Full-Name | The full name of the right. The format of the full name is: Right_-Name/Right_ZoneName | |
| Right_-GUID | The object GUID of the right | |
| Right_-Type | The ID of the right type 1 – Network Access right 2 – Desktop right 3 – Application right 4 – PAM Access right 5 – SSH right 6 – Command right 7 – Restricted Environment 101 – Allow password logon 102 – Allow non password logon 103 – Ignore disabled 104 – Allow non restricted shell 105 – Allow console logon 106 – Allow remote logon 107 – Always permit logon 108 – Audit level – Not required 109 – Audit level – If possible 110 – Audit level – Required 111 – Cloud Authorization Required | RightType.RightTypeId |
| Right_Type_Desc | The display value of the right type: Network Access right Desktop right Application right PAM Access right SSH right Command right Restricted Environment Allow password logon Allow non password logon Ignore disabled Allow non restricted shell Allow console logon Allow remote logon Always permit logon Audit level – Not required Audit level – If possible Audit level – Required Cloud Authorization Required | |
| Right_ZoneId | The zone ID of the right. It will be null for system rights | Zones.Zone_Id |
| Right_-ZoneName | The zone name of the right. It will be null for system rights |
Rights columns used in other views
| Column name | Referred from other view |
|---|---|
| Rights.Right_GUID | EffectiveUserPrivileges_Computer.Right_GUID EffectiveUserPrivileges_ComputerRole.Right_GUID EffectiveUserPrivileges_Zone.Right_GUID |
RightType View
The RightType view provides the type of rights that are defined in the zone and what operating system platform the type applies to.
| Column Name | Description |
|---|---|
| Grants_Logon | Specifies if the right can support a user to log on to a system. 0 – No 1 – Yes |
| RightPlatformId | The platform ID of the right type 0 – Unix 1 – Windows 2 – Unix/Windows |
| RightTypeDesc | The display value of the right type |
| RightTypeId | The ID of the right type |
RightType columns used in other views
| Column name | Referred from other view |
|---|---|
| RightType.RightTypeId | EffectiveUserPrivileges_Computer.Right_Type EffectiveUserPrivileges_ComputerRole.Right_Type EffectiveUserPrivileges_Zone.Right_Type Rights.Right_Type ZoneRolePrivileges.ZoneRolePrivileges_RightType |
RoleAssignmentCustomAttribute View
This view lists the role assignment’s custom attributes.
| Column Name | Description | Refers to |
|---|---|---|
| Role_Id | The role’s object GUID. | Roles.Role_Id |
| CustomAttribute_Name | The custom attribute’s name. | |
| CustomAttribute_Value | The custom attribute’s value. |
RoleAssignments View
This view lists the role assignments, based on zones, computer roles, or computers.
| Column Name | Description | Refers to |
|---|---|---|
| RoleAssignment_EndTime | The end date and time for the role assignment. | |
| RoleAssignment_GUID | The object GUID of the role assignment | |
| RoleAssignment_StartTime | The start date and time for the role assignment. | |
| RoleAssignment_ZoneId | The ID of the zone where the role assignment belongs to | Zones.Zone_Id |
| RoleAssignment_ZoneName | The name of the zone where the role assignment belongs to | |
| RoleAssignment_ZoneDomainId | The ID of the domain where the role assignment belongs to | Domains.Id |
| Assigned_Location | The name of the location where the role assignment is created | |
| Assigned_LocationType | The type of the location where the role assignment was created 1 - Zone , 2 - Computer, 3 - Computer Role | |
| Assigned_LocationType_Desc | The type description of the location where the role assignment was created 1 - Zone , 2 - Computer, 3 - Computer Role | |
| RoleAssignment_TrusteeName | The name of the trustee | |
| RoleAssignment_TrusteeType | The type of the trustee 1 - AD user 2 - AD group 3 - Local UNIX user 4 - Local UNIX group 5 - Local Windows user 6 - Local Windows group 7 - All AD users 8 - All UNIX user 9 - All Windows users | |
| RoleAssignment_TrusteeType_Desc | The type description of the trustee | |
| RoleAssignment_RoleGUID | The object GUID of the assigned role | Roles.Role_Id |
| RoleAssignment_RoleName | The name of the assigned role | |
| RoleAssignment_RoleFullName | The full name of the assigned role | |
| RoleAssignment_Description | The description of the role assignment |
RoleAssignments_Computer View
This view lists the role assignments defined for computers.
| Column Name | Description | Refers to |
|---|---|---|
| RoleAssignment_EndTime | The end date and time for the role assignment. | |
| RoleAssignment_GUID | The object GUID of the role assignment | |
| RoleAssignment_ZoneComputerId | The ID of the zone computer where the role assignment is defined | ZoneComputers.ZoneComputer_Id |
| RoleAssignment_ADComputer_ObjectName | The name of the zone computer where the role assignment is defined | |
| RoleAssignment_ADComputer_CnName | The Active Directory computer's CN name of the zone computer where the role assignment is defined | |
| RoleAssignment_ADComputer_CanonicalName | The Active Directory computer's canonical name of the zone computer where the role assignment is defined | |
| RoleAssignment_ADComputer_DnsHostName | The Active Directory computer's Dns host name name of the zone computer where the role assignment is defined | |
| RoleAssignment_StartTime | The start date and time for the role assignment. | |
| Computer_Platform | The platform of the zone computer where the role assignment is defined 1 - Windows 2 - UNIX | . |
| Computer_Platform_Desc | The platform description of the zone computer where the role assignment is defined 1 - Windows 2 - UNIX | |
| RoleAssignment_ZoneId | The ID of the zone where the role assignment belongs | Zones.Zone_Id |
| RoleAssignment_ZoneName | The name of the zone where the role assignment belongs | |
| RoleAssignment_ZoneDomainId | The ID of the domain where the role assignment belongs | Domains.Id |
| RoleAssignment_TrusteeName | The name of the trustee | |
| RoleAssignment_TrusteeType | The type of the trustee 1 - AD user 2 - AD group 3 - Local UNIX user 4 - Local UNIX group 5 - Local Windows user 6 - Local Windows group 7 - All AD users 8 - All UNIX user 9 - All Windows users | |
| RoleAssignment_TrusteeType_Desc | The type description of the trustee . | |
| RoleAssignment_RoleGUID | The object GUID of the assigned role | Roles.Role_Id |
| RoleAssignment_RoleName | The name of the assigned role | |
| RoleAssignment_RoleFullName | The full name of the assigned role | |
| RoleAssignment_Description | The role assignment description |
RoleAssignments_ComputerRole View
The RoleAssignments_Computer Role view lists the role assignments for each computer role.
| Column Name | Description | Refers to |
|---|---|---|
| RoleAssignment_ComputerRoleDescription | The description of the Compute Role | |
| RoleAssignment_ComputerRoleGUID | The GUID of the Computer Role | |
| RoleAssignment_ComputerRoleName | The name of the Computer Role | |
| RoleAssignment_Description | The description of the role assignment | |
| RoleAssignment_EndTime | The end date and time for the role assignment. | |
| RoleAssignment_GUID | The object GUID of the role assignment | |
| RoleAssignment_RoleFullName | The effective end time of the role assignment | |
| RoleAssignment_RoleGUID | The GUID of the assigned role | Roles.Role_Id |
| RoleAssignment_RoleName | The object GUID of the role that is being assigned | |
| RoleAssignment_StartTime | The start date and time for the role assignment. | |
| RoleAssignment_TrusteeName | The trustee name of the role assignment | |
| RoleAssignment_TrusteeType | The trustee type code of the role assignment 1 – Active Directory user 2 – Active Directory group 3 – Local UNIX user 4 – Local UNIX group 5 – Local Windows user 6 – Local Windows group 7 – All Active Directory users 8 – All UNIX user 9 – All Windows users | |
| RoleAssignment_TrusteeType_Desc | The display value of the trustee type: Active Directory user Active Directory group Local UNIX user Local UNIX group Local Windows user Local Windows group All Active Directory users All UNIX user All Windows users | |
| RoleAssignment_ZoneDomainId | The zone’s domain ID of the role assignment | Domains.Id |
| RoleAssignment_ZoneId | The zone ID of the role assignment | Zones.Zone_Id |
RoleAssignments_Zone View
This view lists the role assignments defined in zones.
| Column Name | Description | Refers to |
|---|---|---|
| RoleAssignment_EndTime | The end date and time for the role assignment. | |
| RoleAssignment_GUID | The object GUID of the role assignment | |
| RoleAssignment_StartTime | The start date and time for the role assignment. | |
| RoleAssignment_ZoneId | The ID of the zone where the role assignment belongs | Zones.Zone_Id |
| RoleAssignment_ZoneName | The name of the zone where the role assignment belongs | |
| RoleAssignment_ZoneDomainId | The id of the domain where the role assignment belongs | Domains.Id |
| RoleAssignment_TrusteeName | The name of the trustee | |
| RoleAssignment_TrusteeType | The type of the trustee 1 - AD user 2 - AD group 3 - Local UNIX user 4 - Local UNIX group 5 - Local Windows user 6 - Local Windows group 7 - All AD users 8 - All UNIX user 9 - All Windows users | |
| RoleAssignment_TrusteeType_Desc | The type description of the trustee | |
| RoleAssignment_RoleGUID | The object GUID of the assigned role | Roles.Role_Id |
| RoleAssignment_RoleName | The name of the assigned role | |
| RoleAssignment_RoleFullName | The full name of the assigned role | |
| RoleAssignment_Description | The description of the role assignment |
RoleCustomAttribute View
This view lists the computer role’s custom attributes.
| Column Name | Description | Refers to |
|---|---|---|
| RoleAssignment_GUID | The role assignment’s object GUID. | RoleAssignments.RoleAssignment_GUID |
| CustomAttribute_Name | The custom attribute’s name. | |
| CustomAttribute_Value | The custom attribute’s value. |
RoleRights View
This view lists the rights for each role.
| Column Name | Description | Refers to |
|---|---|---|
| Role_GUID | The object GUID ID of the role | Roles.Role_Id |
| Role_-Name | The name of the role | |
| Role_-Full-Name | The full name of the role. The format of the full name is: <Role_Name>/<Role_ZoneName> | |
| Right_GUID | The object GUID of the right | Rights.Right_Id |
| Right_-Name | The zone name of the right. It will be null for system rights. | |
| Right_-Full-Name | The full name of the right. The format of the full name is: Right_-Name/Right_ZoneName | |
| Right_ZoneId | The zone ID of the right. This column is null for system rights. | Zones.Zone_Id |
| Right_-Type | The ID of the right type 1 – Network Access right 2 – Desktop right 3 – Application right 4 – PAM Access right 5 – SSH right 6 – Command right 7 – Restricted Environment 101 – Allow password logon 102 – Allow non password logon 103 – Ignore disabled 104 – Allow non restricted shell 105 – Allow console logon 106 – Allow remote logon 107 – Always permit logon 108 – Audit level – Not required 109 – Audit level – If possible 110 – Audit level – Required 111 – Cloud Authorization Required | RightType.RightTypeId |
| Right_Type_Desc | The display value of the right type: Network Access right Desktop right Application right PAM Access right SSH right Command right Restricted Environment Allow password logon Allow non password logon Ignore disabled Allow non restricted shell Allow console logon Allow remote logon Always permit logon Audit level – Not required Audit level – If possible Audit level – Required Cloud Authorization Required | |
| Right_-Description | The description of the right | |
| Right_Platform | The platform ID of the right 0 – Windows, 1 – UNIX, 2 – Windows/UNIX | |
| Right_Platform_Desc | The platform description of the right (Windows, UNIX, Windows/UNIX) | |
| Right_Grants_Logon | If this right could support a user to logon to a system 1 – Yes, 0 – No |
Roles View
The Roles view lists all roles for each zone. This view is a combined view of the Roles_Classic and Roles_Hierarchical views.
| Column Name | Description | Refers to |
|---|---|---|
| Role_-Always-Permit-Logon | (It will be null for classic zone’s role) 1 – always permit, 0 – not always permit | |
| Role_AlwaysPermitLogon_Desc | The display value of _-Always-Permit-Logon (It will be null for classic zone’s role) (Always permit/Not always permit) | |
| Role_-Audit-Level | The role’s audit level (It will be null for classic zone’s role) 0 – audit not required, 1 – audit if possible, 2 – audit required | |
| Role_AuditLevel_Desc | The display value of Role_AuditLevel (It will be null for classic zone’s role) (Audit not Required/Audit if Possible/Audit required) | |
| Role_-Description | The description of the role | |
| Role_-Full-Name | The full name of the role. The format of the full name is: <Role_Name>/<Role_ZoneName> | |
| Role_-Id | The object GUID of the role | |
| Role_-Name | The name of the role | |
| Role_-Zone-Id | The ID of the zone where the role is defined | Zones.Zone_Id |
| Role_ZoneName | The name of the zone where the role is defined |
Roles Columns Used in Other Views
| Column name | Referred from other view |
|---|---|
| Roles.Right_GUID | ZoneRolePrivileges.ZoneRolePrivileges_RightGUID |
| Roles.Role_Id | EffectiveUserPrivileges_Computer.Role_GUID EffectiveUserPrivileges_ComputerRole.Role_GUID EffectiveUserPrivileges_Zone.Role_GUID RoleAssignments_ComputerRole.RoleAssignment_RoleGUID ZoneRolePrivileges.ZoneRolePrivileges_RoleGUID |
Roles_Classic View
The Roles_Classic view lists all roles for each classic zone.
| Column Name | Description | Refers to |
|---|---|---|
| Role_-Always-Permit-Logon | (It will be null for classic zone’s role) It is NULL in this view as Audit Level is not applicable in classic zone | |
| Role_AlwaysPermitLogon_Desc | The display value of Role_-Always-Permit-Logon (It will be null for classic zone’s role) It is NULL in this view as Audit Level is not applicable in classic zone | |
| Role_-Audit-Level | The role’s audit level (It will be null for classic zone’s role) It is NULL in this view as Audit Level is not applicable in classic zone | |
| Role_AuditLevel_Desc | The display value of Role_AuditLevel (It will be null for classic zone’s role) It is NULL in this view as Audit Level is not applicable in classic zone | |
| Role_-Description | The description of the role | |
| Role_-Full-Name | The full name of the role. The format of the full name is: <Role_Name>/<Role_ZoneName> | |
| Role_-Id | The object GUID of the role | |
| Role_-Name | The name of the role | |
| Role_-Zone-Id | The ID of the zone where the role is defined | Zones.Zone_Id |
| Role_ZoneName | The name of the zone where the role is defined |
Roles_Hierarchical View
The Roles_Hierarchical view lists all roles for each hierarchical zone.
| Column Name | Description | Refers to |
|---|---|---|
| Role_-Always-Permit-Logon | 1 – always permit, 0 – not always permit | |
| Role_AlwaysPermitLogon_Desc | The display value of Role_-Always-Permit-Logon (Always permit/Not always permit) | |
| Role_-Audit-Level | The role’s audit level 0 – audit not required, 1 – audit if possible, 2 – audit required | |
| Role_AuditLevel_Desc | The display value of Role_AuditLevel (Audit not Required/Audit if Possible/Audit required) | |
| Role_-Description | The description of the role | |
| Role_-Full-Name | The full name of the role. The format of the full name is: <Role_Name>/<Role_ZoneName> | |
| Role_-ID | The object ID of the role | |
| Role_-Name | The name of the role | |
| Role_-Zone-Id | The ID of the zone where the role is defined | Zones.Zone_Id |
| Role_ZoneName | The name of the zone where the role is defined |
TrusteeTypes View
This view lists the role assignment trustee types.
| Column Name | Description | Refers to |
|---|---|---|
| TrusteeType_Id | The type ID of the trustee | |
| TrusteeType_Desc | The type description of the trustee |
Zone_Classic View
The Zones_Classic view lists all Classic zones.
| Column Name | Description | Refers to |
|---|---|---|
| Zone_AvailableShells | Zone’s Available shells | |
| Zone_CanonicalName | The canonical name of the Zone | |
| Zone_DefaultGroup | Zone’s default group | |
| Zone_DefaultHomeDirectory | Zone’s default home directory | |
| Zone_DefaultPrimaryGroupId | The default primary group | |
| Zone_DefaultPrimaryGroupName | The name of the default primary group | |
| Zone_DefaultShell | Zone’s default shell | |
| Zone_DomainId | The name of the domain which the Active Directory user belongs to | Domains.Id |
| Zone_DomainName | The ID of the domain which the Active Directory user belongs to | |
| Zone_Id | The auto generated ID of the Zone | |
| Zone_IsHierarchical | If the zone was a Hierarchical zone or not 1 – Is Hierarchical Zone, 0 – Classic Zone | |
| Zone_IsHierarchical_Desc | The display value for Zone_IsHierarchical (Yes/No) | |
| Zone_IsSFU | If the zone was a SFU zone or not 1 – SFU Zone, 0 – Non SFU Zone | |
| Zone_IsSFU_Desc | (Yes/No) | |
| Zone_Name | The name of the Zone | |
| Zone_NextGID | Zone’s next gid | |
| Zone_NextUID | Zone’s next uid | |
| Zone_NISDomain | Zone’s NIS domain | |
| Zone_ReservedGID | Zone’s reserved gid | |
| Zone_ReservedUID | Zone’s reserved uid | |
| Zone_SFUDomain | Zone’s SFU domain |
Zone_Hierarchical View
The Zones_Hierarchical view lists all Hierarchical zones.
| Column Name | Description | Refers to |
|---|---|---|
| Zone_AvailableShells | Zone’s Available shells | |
| Zone_CanonicalName | The canonical name of the Zone | |
| Zone_DefaultGroup | Zone’s default group | |
| Zone_DefaultHomeDirectory | Zone’s default home directory | |
| Zone_DefaultPrimaryGroupId | The default primary group | |
| Zone_DefaultPrimaryGroupName | The name of the default primary group | |
| Zone_DefaultShell | Zone’s default shell | |
| Zone_DomainId | The name of the domain which the Active Directory user belongs to | Domains.Id |
| Zone_DomainName | The ID of the domain which the Active Directory user belongs to | |
| Zone_Id | The auto generated ID of the Zone | |
| Zone_IsHierarchical | If the zone was a Hierarchical zone or not 1 – Is Hierarchical Zone, 0 – Classic Zone | |
| Zone_IsHierarchical_Desc | The display value for Zone_IsHierarchical 1 – Yes, 0 - No | |
| Zone_IsSFU | If the zone was a SFU zone or not 1 – SFU Zone, 0 – Non SFU Zone | |
| Zone_IsSFU_Desc | 1 – Yes, 0 - No | |
| Zone_Name | The name of the Zone | |
| Zone_NextGID | Zone’s next gid | |
| Zone_NextUID | Zone’s next uid | |
| Zone_NISDomain | Zone’s NIS domain | |
| Zone_ReservedGID | Zone’s reserved gid | |
| Zone_ReservedUID | Zone’s reserved uid | |
| Zone_SFUDomain | Zone’s SFU domain | |
| Zone_TrustedCloudInstanceUrl | Trusted cloud instance URL |
Zones_Hierarchical Columns Used in Other Views
| Column name | Referred from other view |
|---|---|
| Zones_Hierarchical.Zone_Id | EffectiveUserPrivileges_Computer.EffectiveZone_Id EffectiveUserPrivileges_Computer.ZoneUser_Id EffectiveUserPrivileges_ComputerRole.EffectiveZone_Id |
ZoneComputers View
The ZoneComputers view lists computer profiles for each zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneComputer_ADComputerCnName | The Active Directory computer’s common name. | |
| ZoneComputer_ADComputerDnsHostName | The Active Directory computer’s DNS hostname | |
| ZoneComputer_ADComputerDomainId | The domain ID of the Active Directory computer which is managed by the zone | |
| ZoneComputer_ADComputerId | The object GUID of the Active Directory computer which is managed by the zone | ADComputers.ADComputer_GUID |
| ZoneComputer_ADComputerName | The name of the Active Directory computer which is managed by the zone | |
| ZoneComputer_ADComputerObjectName | The object name of the computer, in the format of <computer CN>.<computer domain>. | |
| ZoneComputer_AgentVersion | The agent version of the managed computer | |
| ZoneComputer_ComputerType | The type of the managed computer 1 – Windows, 2 – Unix | |
| ZoneComputer_ComputerType_Desc | The display value of the ZoneComputer_ComputerType (Windows/Unix) | |
| ZoneComputer_Id | The object GUID of the computer profile | |
| ZoneComputer_IsHierarchical | 1 – It is managed by a hierarchical zone, 0 – It is managed by a classic zone | |
| ZoneComputer_IsHierarchical_Desc | The display value of the ZoneComputer_IsHierarchical (Yes/No) | |
| ZoneComputer_IsOrphan | 1 – It is an orphan profile, 0 – It is not an orphan profile | |
| ZoneComputer_IsOrphan_Desc | The display value of the ZoneComputer_IsOrphan (Yes/No) | |
| ZoneComputer_IsZoned | If the computer joined zone 1 – Joined zone, 0 – Only has machine overrides | |
| ZoneComputer_JoinDate | The date when the managed computer joined zone (UTC time) | |
| ZoneComputer_LicenseType | Specifies the type of computer license. 1 - Server, 2-Workstation, 3-UNIX, 4-Express | |
| ZoneComputer_LicenseType_Desc | The description of the license type. | |
| ZoneComputer_Name | The name of the managed computer | |
| ZoneComputer_PreferredSite | The preferred site of the computer. | |
| ZoneComputer_PreferredSubnetSite | The preferred subnet site of the computer. | |
| ZoneComputer_ZoneDomainId | The domain ID of the zone by which the computer is managed | |
| ZoneComputer_ZoneId | The ID of the zone by which the computer managed | Zones.Zone_Id |
| ZoneComputer_ZoneName | The name of the zone by which the computer managed |
ZoneComputer Columns Used in Other Views
| Column name | Referred from other view |
|---|---|
| ZoneComputer.ZoneComputer_Id | EffectiveUserPrivileges_Computer.ZoneComputer_Id EffectiveZoneGroups.ZoneGroup_ZoneComputerId EffectiveZoneUsers.ZoneUser_ComputerProfileId |
ZoneGroups View
The ZoneGroups view lists group profiles for each zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneGroup_-ADGroup-GUID | The object GUID of the Active Directory group which the group profile referring to. | ADGroups.GUID |
| ZoneGroup_ADGroupName | The name of the Active Directory group which the user profile referring to. | |
| ZoneGroup_-Gid | The group profile’s gid | |
| ZoneGroup_-Id | The auto generated ID of the group profile | |
| ZoneGroup_IsOrphan | If the zone group referencing to a valid Active Directory group 1 – It is an orphan user profile. 0 – It is not an orphan profile | |
| ZoneGroup_IsOrphan_Desc | The display value for ZoneGroup_IsOrphan 1 – Yes, 0 – No | |
| ZoneGroup_-Name | The group profile’s name | |
| ZoneGroup_-Zone-Id | The ID of the zone where the group profile is defined | Zones.Zone_Id |
| ZoneGroup_ZoneName | The name of the zone where the group profile is defined |
ZoneGroup Columns Used in Other Views
| Column name | Referred from other view |
|---|---|
| ZoneGroups.ZoneGroup_Id | EffectiveUserPrivileges_Computer.ZoneComputer_Id EffectiveZoneGroups.ZoneGroup_ZoneComputerId EffectiveZoneUsers.ZoneUser_ComputerProfileId |
ZoneHierarchy View
| Column Name | Description | Refers to |
|---|---|---|
| ParentZone_Id | The ID of the parent zone. | Zones.Zone_Id |
| ParentZone_Name | The name of the parent zone. | |
| ParentZone_DomainID | The domain ID of the parent zone. | Domains.Id |
| ChildZone_Id | The ID of the child zone. | Zones.Zone_Id |
| ChildZone_Name | The name of the child zone. | |
| ChildZone_DomainId | The domain ID of the child zone. | Domains.Id |
ZoneLocalGroupMembers View
This view lists the local group members for each zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneLocalGroup_-Id | The auto generated ID of the local group profile | |
| ZoneLocalGroup_-Zone-Id | The ID of the zone where the local group profile is | Zones.Zone_Id |
| ZoneLocalGroup_ZoneName | The name of the zone where the local group profile is | |
| ZoneLocalGroup_-Name | The local group profile’s name | |
| ZoneLocalGroup_MemberName | The name of the local group’s member |
ZoneLocalGroups View
This view lists the local group profiles for each zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneLocalGroup_-Id | The auto generated ID of the local group profile | |
| ZoneLocalGroup_-Zone-Id | The ID of the zone where the local group profile is | Zones.Zone_Id |
| ZoneLocalGroup_ZoneName | The name of the zone where the local group profile is | |
| ZoneLocalGroup_-Gid | The local group profile’s GID | |
| ZoneLocalGroup_-Name | The local group profile’s name | |
| ZoneLocalGroup_ProfileState | The profile state of the local group profile 1 = Enabled, 3 = Removed from /etc/group | |
| ZoneLocalGroup_ProfileState_Desc | The display value for ZoneLocalGroup_ProfileState (Enabled/Removed from /etc/group) |
ZoneLocalUsers View
This view lists the local user profiles for each zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneLocalUser_Id | The auto generated ID of the local user profile | |
| ZoneLocalUser_ZoneId | The ID of the zone where the local user profile is | Zones.Zone_Id |
| ZoneLocalUser_ZoneName | The name of the zone where the local user profile is | |
| ZoneLocalUser_Name | The local user profile’s UNIX name | |
| ZoneLocalUser_HomeDirectory | The local user profile’s home directory | |
| ZoneLocalUser_PrimaryGroupID | The local user profile’s primary group ID | |
| ZoneLocalUser_PrimaryGroupName | The local user profile’s primary group name | |
| ZoneLocalUser_IsHierarchical | If the zone user was defined in a hierarchical zone or not 1 – It is defined in a hierarchical zone. 0 – Is is defined in a classic zone | |
| ZoneLocalUser_IsHierarchical_Desc | The display value for ZoneLocalUser_IsHierarchical (Yes/No) | |
| ZoneLocalUser_Shell | The shell of the zone user | |
| ZoneLocalUser_GECOS | The GECOS of the zone user | |
| ZoneLocalUser_Uid | The zone user’s uid | |
| ZoneLocalUser_ProfileFlag | The profile state of the local user 1 means Enabled, 2 means Disabled, 3 means Removed from /etc/passwd | |
| ZoneLocalUser_ProfileFlag_Desc | The display value for ZoneLocalUser_ProfileState (Enabled/Disabled/Removed from /etc/passwd) |
ZoneLocalWinGroupMembers View
This view lists the local Windows group members for each zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneLocalGroup_Id | The auto-generated ID of the local Windows group profile | |
| ZoneLocalGroup_ZoneId | The ID of the zone that contains the local Windows group profile | Zones.Zone_Id |
| ZoneLocalGroup_ZoneName | The name of the zone that contains the local Windows group profile | |
| ZoneLocalGroup_Name | The local Windows group profile’s name | |
| ZoneLocalGroup_MemberName | The name of the local Windows group’s member |
ZoneLocalWinGroups View
This view lists the local Windows group profiles for each zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneLocalGroup_Id | The auto-generated ID of the local Windows group profile | |
| ZoneLocalGroup_ZoneId | The ID of the zone that contains the local Windows group profile | Zones.Zone_Id |
| ZoneLocalGroup_ZoneName | The name of the zone that contains the local Windows group profile | |
| ZoneLocalGroup_Name | The local Windows group profile’s name | |
| ZoneLocalGroup_ProfileState | The profile state of the local Windows group profile 1 = Enabled, 3 = Removed | |
| ZoneLocalGroup_ProfileState_Desc | The display value for ZoneLocalGroup_ ProfileState (Enabled/Removed) |
ZoneLocalWinUsers View
This view lists the local Windows user profiles for each zone.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneLocalUser_Id | The auto generated ID of the local Windows user profile | |
| ZoneLocalUser_ZoneId | The ID of the zone where the local Windows user profile is | Zones.Zone_Id |
| ZoneLocalUser_ZoneName | The name of the zone where the local Windows user profile is | |
| ZoneLocalUser_Name | The local Windows user profile’s name | |
| ZoneLocalUser_IsHierarchical | If the zone user was defined in a hierarchical zone or not 1 – It is defined in a hierarchical zone. 0 – It is defined in a classic zone | |
| ZoneLocalUser_IsHierarchical_Desc | The display value for ZoneLocalUser_IsHierarchical (Yes/No) | |
| ZoneLocalUser_FullName | The full name of the local Windows user | |
| ZoneLocalUser_Description | The description of the local Windows user | |
| ZoneLocalGroup_ProfileFlag | The profile state of the local Windows user profile 1 = Enabled, 2 = Disabled, 3 = Removed | |
| ZoneLocalGroup_ProfileFlag_Desc | The display value for ZoneLocalUser_ ProfileState (Enabled/Disabled/Removed) |
ZoneRolePrivileges View
The ZoneRolePrivileges view lists the roles that are defined for each zone and the rights that are granted by each of these roles.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneRolePrivileges_RightFullName | The full name of the right | |
| ZoneRolePrivileges_RightGUID | The GUID of the right | Roles.Right_GUID |
| ZoneRolePrivileges_RightName | The name of the right | |
| ZoneRolePrivileges_RightPlatform | Whether the right is for Unix, Windows or both | |
| ZoneRolePrivileges_RightPlatform_Desc | The display value of the right platform | |
| ZoneRolePrivileges_RightType | The type ID of the right | RightType.RightTypeId |
| ZoneRolePrivileges_RightType_Desc | The display value of the right’s type | |
| ZoneRolePrivileges_RightZoneDomainId | The domain ID of the zone of the right | Domains.Id |
| ZoneRolePrivileges_RightZoneId | The zone ID of the right | Zones.Zone_Id |
| ZoneRolePrivileges_RightZoneIsHierarchical | If the zone of the right is hierarchical 1 – Yes, 0 – No | |
| ZoneRolePrivileges_RightZoneIsHierarchical_Desc | The display value of the ZoneRolePrivileges_RightZoneIsHierarchical (Yes/No) | |
| ZoneRolePrivileges_RightZoneName | The zone name of the right | |
| ZoneRolePrivileges_RoleFullName | The full name of the role | |
| ZoneRolePrivileges_RoleGUID | The GUID of the role | Roles.Role_Id |
| ZoneRolePrivileges_RoleName | The name of the role | |
| ZoneRolePrivileges_RoleZoneDomainId | The domain ID of the zone of the domain | |
| ZoneRolePrivileges_RoleZoneId | The zone ID of the role | Zones.Zone_Id |
| ZoneRolePrivileges_RoleZoneIsHierarchical | If the zone of the role is hierarchical 1 – Yes, 0 – No | |
| ZoneRolePrivileges_RoleZoneIsHierarchical_Desc | The display value of the ZoneRolePrivileges_RoleZoneIsHierarchical (Yes/No) | |
| ZoneRolePrivileges_RoleZoneName | The zone name of the role |
Zones View
The Zones view lists all the zones in the domain. This view is a combination of both Zones_Classic and Zones_Hierarchical.
| Column Name | Description | Refers to |
|---|---|---|
| Zone_AvailableShells | Zone’s Available shells | |
| Zone_CanonicalName | The canonical name of the Zone | |
| Zone_DefaultGIDType | The ID of the default GID type 1—Use the auto-incremented GID 2—Use the generated GID from the SID 3—Use the Apple GID scheme | |
| Zone_DefaultGIDType_Desc | The description of the default GID type (Use auto-incremented GID, Generated GID from SID, or Use Apple GID scheme) | |
| Zone_DefaultGroup | Zone’s default group | |
| Zone_DefaultHomeDirectory | Zone’s default home directory | |
| Zone_DefaultPrimaryGroupId | The default primary group | |
| Zone_DefaultPrimaryGroupName | The name of the default primary group | |
| Zone_DefaultShell | Zone’s default shell | |
| Zone_DefaultUIDType | The ID of the default UID type (applies to hierarchical zones only) 1—Use auto-incremented UID 2—Generated UID from SID 3—Use Apple UID scheme | |
| Zone_DefaultUIDType_Desc | The description of the default type. For hierarchical zones, this is one of the following: Use auto-incremented UID, Generated UID from SID, or Use Apple UID scheme. For classic zones: Use auto-incremented UID. | |
| Zone_DefaultUserName | The description of the zone scheme ID, such as Standard, RFC 2307, or SFU. | |
| Zone_DomainId | The name of the domain which the Active Directory user belongs to | Domains.Id |
| Zone_DomainName | The ID of the domain which the Active Directory user belongs to | |
| Zone_Id | The auto generated ID of the Zone | |
| Zone_IsHierarchical | If the zone was a Hierarchical zone or not 1 – Is Hierarchical Zone, 0 – Classic Zone | |
| Zone_IsHierarchical_Desc | If the zone was a Hierarchical zone or not (Yes/No) | |
| Zone_IsSFU | If the zone was a SFU zone or not 1 – SFU Zone, 0 – Non SFU Zone | |
| Zone_IsSFU_Desc | If the zone was a SFU zone or not (Yes/No) | |
| Zone_Name | The name of the Zone | |
| Zone_NextGID | Zone’s next gid | |
| Zone_NextUID | Zone’s next uid | |
| Zone_NISDomain | Zone’s NIS domain | |
| Zone_ReservedGID | Zone’s reserved gid | |
| Zone_ReservedUID | Zone’s reserved uid | |
| Zone_Schema | The ID of the zone scheme: 1—Standard 2—RFC 2307 3—SFU | |
| Zone_SFUDomain | Zone’s SFU domain | |
| Zone_Type | The zone type (hierarchical or classic) | |
| Zone_TrustedCloudInstanceUrl | Trusted cloud instance URL |
Zone view columns used in other views
| Column name | Referred from other view |
|---|---|
| Zone.Zone_Id | Roles_Classic.Role_ZoneId ComputerRoleMembership.ComputerRole_ZoneId ComputerRoleMembership.ZoneComputer_ZoneId EffectiveUserPrivileges_Computer.EffectiveZone_Id EffectiveUserPrivileges_ComputerRole.EffectiveZone_Id EffectiveUserPrivileges_Zone.EffectiveZone_Id EffectiveZoneGroups.ZoneGroup_ZoneId EffectiveZoneUsers.ZoneUSer_ZoneId Rights.Right_Id RoleAssignments_ComputerRole.RoleAssignment_ZoneId Roles.Role_ZoneId Roles_Hierarchical.Role_ZoneId ZoneComputers.ZoneComputer_ZoneId ZoneGroups.ZoneGroup_ZoneId ZoneRolePrivileges.ZoneRolePrivileges_RoleZoneId ZoneRolePrivileges.ZoneRolePrivileges_RightZoneId ZoneUsers.ZoneUser_ZoneId |
ZoneUsers View
The ZoneUsers view lists the user profiles for each zones.
| Column Name | Description | Refers to |
|---|---|---|
| ZoneUser_ADUserGUID | The object GUID of the Active Directory user which the user profile referring to. | ADUsers.ADUser_GUID |
| ZoneUser_ADUserName | The name of the Active Directory user which the user profile referring to. | |
| ZoneUser_GECOS | The GECOS of the zone user | |
| ZoneUser_HomeDirectory | The user profile’s home directory | |
| ZoneUser_Id | The auto generated ID of the user profile | |
| ZoneUser_IsHierarchical | If the zone user was defined in a hierarchical zone or not 1 – It is defined in a hierarchical zone. 0 – Is is defined in a classic zone | |
| ZoneUser_IsHierarchical_Desc | The display value for ZoneUser_IsHierarchical (Yes/No) | |
| ZoneUser_IsOrphan | If the zone user referencing to a valid Active Directory user 1 – It is an orphan user profile. 0 – It is not an orphan profile | |
| ZoneUser_IsOrphan_Desc | The display value for ZoneUser_IsOrphan (Yes/No) | |
| ZoneUser_IsSFU | If the zone user was defined in a SFU zone or not 1 – It is defined in a SFU zone. 0 – Is is not defined in a SFU zone | |
| ZoneUser_IsSFU_Desc | The display value for ZoneUser_IsSFU (Yes/No) | |
| ZoneUser_Name | The user profile’s unix name | |
| ZoneUser_PrimaryGroupID | The user profile’s primary group id | |
| ZoneUser_PrimaryGroupName | The user profile’s primary group name | |
| ZoneUser_Shell | The shell of the zone user | |
| ZoneUser_Uid | The zone user’s uid | |
| ZoneUser_UserEnabled | If the zone user is enabled (For classic zone user only, it will be null for Hierarchical zone user) 1 – enabled, 0 – disabled, NULL – not applicable | |
| ZoneUser_UserEnabled_Desc | (Yes/No) | |
| ZoneUser_ZoneId | The ID of the zone where the user profile under | Zones.Zone_Id |
| ZoneUser_ZoneName | The name of the zone where the user profile under |
ZoneUser Columns Used in Other Views
| Column name | Referred from other view |
|---|---|
| ZoneUsers.ZoneUser_Id | EffectiveUserPrivileges_Computer.ZoneUser_Id EffectiveUserPrivileges_ComputerRole.ZoneUser_Id EffectiveUserPrivileges_Zone.ZoneUser_Id EffectiveZoneUsers.ZoneUser_Id |
